grc-diagrams
claudeEditable draw.io diagram patterns for GRC system boundaries, evidence flows, control maps, risk treatment, audits, crosswalks, TPRM, POA&M, data flows, RACI, and operating models.
13 skills · 13 commands
433
claude
testssl-inspector
GRC connector wrapping testssl.sh: TLS/SSL protocol, cipher, certificate, and known-CVE checks on HTTPS endpoints → v1 finding contract
/
Plugin testssl-inspector from marketplace grc-engineering-suite in GRCEngClub/claude-grc-engineering. Commands read from the repo's manifest — today.
What it installs
Skills (1)
testssl-inspector-expertInterpret testssl-inspector normalized findings, recommend remediations, and tie evidence back to SCF anchor controls plus SOC 2 / NIST 800-53 r5 / PCI DSS 4.0.1 / ISO 27002:2022 equivalents derived from SCF crosswalks.
Slash commands (3)
/testssl-inspector:scanRun testssl.sh against one or more HTTPS endpoints and emit v1 Findings mapped to SOC 2, NIST 800-53, PCI DSS 4.0.1, ISO 27001, and SCF controls.
/testssl-inspector:setupLocate testssl.sh (native install or Docker), record version, and write default targets to the connector config.
/testssl-inspector:statusShow configured testssl runner, version, target count, and recent scans on disk.
More from GRCEngClub/claude-grc-engineering
All 70 plugins →grc-engineer
claudeMaps IaC to compliance controls, generates policies, collects evidence, reviews PRs
7 skills · 19 commands
433
grc-portfolio
claudeBuild and deploy a professional portfolio website for GRC engineers — certifications, frameworks, audit experience, and AWS hosting.
7 skills · 7 commands
433
grc-reporter
claudeTranslate findings, risks, and metrics into narratives leadership reads. Reference implementation of the Reporting category from RFC #38.
5 skills · 4 commands
433
iso27001
claudeISO 27001 Annex A controls and ISMS implementation guidance
1 skill · 8 commands
433
nist-800-53
claudeNIST 800-53 control families and baseline selection (Low/Moderate/High)
1 skill · 8 commands
433
Similar plugins
ruflo-adr
claudecodexADR lifecycle management — create, index, supersede, and link Architecture Decision Records to code
5 skills · 1 command · 1 agent
ruvnet/ruflo 81,589
Install the "AAS Privacy & Compliance Engineering" editorial skill bundle for Claude Code.
6 skills
sickn33/agentic-awesome-skills 49,620
Automate API security directly in Claude Code with 42Crunch - automatically audit OpenAPI specs, detect vulnerabilities aligned with OWASP API Security risks (including BOLA/BFLA), and apply AI-powered fixes. Designed for AI-assisted development workflows, it provides continuous guardrails through an audit->scan->remediate->validate loop, ensuring APIs meet enterprise security standards before deployment.
5 skills
anthropics/claude-plugins-official 47,076
security-scanning
claudecodexSAST analysis, dependency vulnerability scanning, OWASP Top 10 compliance, container security scanning, and automated security hardening
5 skills · 3 commands · 2 agents
wshobson/agents 42,461
twilio-developer-kit
claudecodexTwilio Skills provide procedural knowledge for AI coding agents — which APIs to use, in what order, and what to avoid. Covers SMS, Voice, WhatsApp, Verify, SendGrid, Compliance, and 30+ products.
57 skills · 1 MCP server
anthropics/knowledge-work-plugins 35,601
ra-qm-skills
claude14 regulatory affairs & quality management skills for HealthTech/MedTech: ISO 13485 QMS, MDR 2017/745, FDA 510(k)/PMA, GDPR/DSGVO, ISO 27001 ISMS, CAPA management, risk management, clinical evaluation, SOC 2 compliance.
21 skills
alirezarezvani/claude-skills 29,725
Maintain testssl-inspector?
This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.
claude & codex plugins70 plugins