grc-engineer
claudeMaps IaC to compliance controls, generates policies, collects evidence, reviews PRs
7 skills · 19 commands
Editable draw.io diagram patterns for GRC system boundaries, evidence flows, control maps, risk treatment, audits, crosswalks, TPRM, POA&M, data flows, RACI, and operating models.
Plugin grc-diagrams from marketplace grc-engineering-suite in GRCEngClub/claude-grc-engineering. Commands read from the repo's manifest — today.
drawioAlways use when the user asks to create, generate, draw, or design a diagram, flowchart, architecture diagram, ER diagram, sequence diagram, class diagram, network diagram, mockup, wireframe, UI sketch, GRC workflow, control map, audit process, risk register flow, compliance architecture, or mention
grc-audit-workflow-diagramUse when creating a draw.io diagram for audit planning, request lists, evidence, testing, exceptions, remediation, and reporting in a GRC, security, audit, compliance, privacy, cloud, or risk context.
grc-compliance-operating-model-diagramUse when creating a draw.io diagram for high-level GRC program architecture, continuous compliance operating models, three lines of defense, and executive program maps in a GRC, security, audit, compliance, privacy, cloud, or risk context.
grc-control-map-diagramUse when creating a draw.io diagram for controls mapped across frameworks, systems, owners, risks, and evidence sources in a GRC, security, audit, compliance, privacy, cloud, or risk context.
grc-data-flow-diagramUse when creating a draw.io diagram for regulated data flows, data classifications, storage, processing, transfer, access, retention, and logging in a GRC, security, audit, compliance, privacy, cloud, or risk context.
grc-evidence-flow-diagramUse when creating a draw.io diagram for evidence collection, evidence lifecycle, audit evidence pipelines, and systems of record in a GRC, security, audit, compliance, privacy, cloud, or risk context.
grc-framework-crosswalk-diagramUse when creating a draw.io diagram for mapping controls and obligations across frameworks to show overlap, gaps, and conflicts in a GRC, security, audit, compliance, privacy, cloud, or risk context.
grc-poam-diagramUse when creating a draw.io diagram for POA&M items, audit findings, remediation milestones, validation, closure, and escalation paths in a GRC, security, audit, compliance, privacy, cloud, or risk context.
grc-raci-diagramUse when creating a draw.io diagram for responsibility assignments across GRC, security, engineering, legal, HR, procurement, vendors, and auditors in a GRC, security, audit, compliance, privacy, cloud, or risk context.
grc-risk-treatment-diagramUse when creating a draw.io diagram for risk intake, scoring, treatment, exception approval, residual risk, and monitoring workflows in a GRC, security, audit, compliance, privacy, cloud, or risk context.
grc-shared-responsibility-diagramUse when creating a draw.io diagram for cloud/SaaS shared responsibility, inherited controls, provider controls, customer controls, and evidence ownership in a GRC, security, audit, compliance, privacy, cloud, or risk context.
grc-system-boundary-diagramUse when creating a draw.io diagram for compliance scope, authorization boundaries, trust boundaries, in-scope/out-of-scope systems, and system context diagrams in a GRC, security, audit, compliance, privacy, cloud, or risk context.
grc-third-party-risk-diagramUse when creating a draw.io diagram for vendor intake, tiering, questionnaires, security/privacy/legal review, contracting, and ongoing monitoring in a GRC, security, audit, compliance, privacy, cloud, or risk context.
/grc-diagrams:audit-workflowCreate an editable draw.io grc audit workflow diagram for GRC professionals
/grc-diagrams:control-mapCreate an editable draw.io grc control map diagram for GRC professionals
/grc-diagrams:data-flowCreate an editable draw.io grc regulated data flow diagram for GRC professionals
/grc-diagrams:drawioCreate an editable native draw.io diagram, optionally exported to PNG/SVG/PDF with embedded XML
/grc-diagrams:evidence-flowCreate an editable draw.io grc evidence flow diagram for GRC professionals
/grc-diagrams:framework-crosswalkCreate an editable draw.io grc framework crosswalk diagram for GRC professionals
/grc-diagrams:operating-modelCreate an editable draw.io grc compliance operating model diagram for GRC professionals
/grc-diagrams:poamCreate an editable draw.io grc poa&m lifecycle diagram for GRC professionals
/grc-diagrams:raciCreate an editable draw.io grc raci diagram for GRC professionals
/grc-diagrams:risk-treatmentCreate an editable draw.io grc risk treatment diagram for GRC professionals
/grc-diagrams:shared-responsibilityCreate an editable draw.io grc shared responsibility diagram for GRC professionals
/grc-diagrams:system-boundaryCreate an editable draw.io grc system boundary diagram for GRC professionals
/grc-diagrams:third-party-riskCreate an editable draw.io grc third-party risk diagram for GRC professionals
Maps IaC to compliance controls, generates policies, collects evidence, reviews PRs
7 skills · 19 commands
Build and deploy a professional portfolio website for GRC engineers — certifications, frameworks, audit experience, and AWS hosting.
7 skills · 7 commands
Translate findings, risks, and metrics into narratives leadership reads. Reference implementation of the Reporting category from RFC #38.
5 skills · 4 commands
ISO 27001 Annex A controls and ISMS implementation guidance
1 skill · 8 commands
NIST 800-53 control families and baseline selection (Low/Moderate/High)
1 skill · 8 commands
SOC 2 Trust Service Criteria expertise and Type I/II assessment support
1 skill · 7 commands
Core skills library for Claude Code: TDD, debugging, collaboration patterns, and proven techniques
15 skills · hooks
Editorial diagrams in your brand, as self-contained HTML and SVG. Architecture, flowcharts, sequence, state machines, ER and database schemas, timelines, swimlanes, org charts, Gantt, Wardley maps, user journeys, service blueprints, UML class, lifecycle phase maps, and charts from bar, line and scatter to Sankey, treemap and heatmap, plus many more. Redraws draw.io, Mermaid, Excalidraw and PlantUML files. Exports SVG and PNG.
1 skill · 7 commands
5 skills + 35 modes + Material Passport pipeline. Includes v3.6.7 cross-model audit gate and v3.6.8 generator-evaluator contract.
5 skills · 16 commands · 4 agents · hooks
Backend API design, GraphQL architecture, workflow orchestration with Temporal, and test-driven backend development
9 skills · 1 command · 8 agents
AI-supervised issue tracker for coding workflows
1 skill · 1 agent · hooks
Without good data, your agent gives generic advice. Keyword research, competitor research, backlinks, and site audits. All for $10/month.
12 skills · 1 MCP server
This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.