claude

grc

GRC domain knowledge — 18 frameworks, 24 commands, cross-framework mapping, document review, and operational workflows. Cloud-agnostic.

190 on GitHubby Mario Lunatov1.4.0MITupdated 1 month ago
/

Plugin grc from marketplace mlunato47 in mlunato47/claude-grc-plugin. Commands read from the repo's manifest — 1 month ago.

What it installs

Skills (1)

  • grc-knowledge

    Senior GRC analyst expertise across 18 compliance frameworks — NIST 800-53, FedRAMP (Rev5 + 20x/CR26, KSIs, VDR/VER, Certification Classes A–D), DoD/DoW Impact Levels (IL2–IL6, DISA Cloud SRG), ITAR (22 CFR 120–130, USML, deemed exports, §120.54 encryption carve-out), FISMA, CMMC, SOC 2, ISO 27001,

Slash commands (24)

  • /grc:audit-prep

    Audit preparation checklists and guidance by audit type

  • /grc:boundary-guidance

    Authorization boundary definition guidance

  • /grc:compliance-calendar

    Generate a recurring compliance activity calendar by framework

  • /grc:conmon-guide

    Continuous monitoring guidance by topic

  • /grc:control-lookup

    Look up controls by framework and ID or keyword

  • /grc:deviation-request

    Draft deviation requests, risk acceptances, or false positive justifications

  • /grc:evidence-checklist

    Generate an evidence preparation checklist for audits or assessments

  • /grc:gap-analysis

    Perform a structured gap analysis against a compliance framework

  • /grc:inheritance

    Model control inheritance based on service model and provider stack

  • /grc:map-controls

    Map controls between compliance frameworks using NIST 800-53 as the universal hub

  • /grc:multi-framework

    Analyze overlap and gaps across multiple compliance frameworks

  • /grc:oscal-guide

    OSCAL structure, readiness, and conversion guidance

  • /grc:poam-help

    POA&M management help and templates

  • /grc:rev5-transition

    NIST 800-53 Rev 4 to Rev 5 transition guidance

  • /grc:review-crm

    Review a CRM for coverage, clarity, and completeness

  • /grc:review-narrative

    Review a control implementation narrative for completeness and quality

  • /grc:review-poam

    Review POA&M entries or structure for completeness

  • /grc:review-policy

    Review a policy document for structure, coverage, and language quality

  • /grc:review-ssp

    Validate SSP structure and completeness against FedRAMP template standards

  • /grc:sar-response

    Draft structured responses to SAR findings

  • /grc:score-maturity

    Score control implementation maturity 0-5 with next-level guidance

  • /grc:significant-change

    Analyze whether a system change qualifies as significant and determine required actions

  • /grc:ssp-section

    Draft SSP control family descriptions

  • /grc:tabletop-scenario

    Generate IR or CP tabletop exercise scenarios

Subagents (1)

  • grc-researcher
View source on GitHub

Similar plugins

ruflo-adr

claudecodex

ADR lifecycle management — create, index, supersede, and link Architecture Decision Records to code

5 skills · 1 command · 1 agent

ruvnet/ruflo 81,589

AAS Privacy & Compliance Engineering

codex

Install the "AAS Privacy & Compliance Engineering" workflow plugin from Agentic Awesome Skills.

6 skills

sickn33/agentic-awesome-skills 49,620

airtable

claudecodex

Airtable is the database and operations layer for your agents — whether running product, marketing, sales, ops, HR, or a custom business app. It combines structured data with multiplayer visual surfaces (grid, kanban, calendar, gallery, timeline) humans and agents share — plus sync integrations to Jira, Salesforce, Zendesk, Google Drive, Databricks, and the rest of your stack, all backed by enterprise governance. This plugin makes Claude fluent in Airtable: creating bases and schema, working with records, and sharing UI for collaboration. Bundles the official Airtable MCP server.

8 skills · 1 MCP server

anthropics/claude-plugins-official 47,076

security-scanning

claudecodex

SAST analysis, dependency vulnerability scanning, OWASP Top 10 compliance, container security scanning, and automated security hardening

5 skills · 3 commands · 2 agents

wshobson/agents 42,461

twilio-developer-kit

claudecodex

Twilio Skills provide procedural knowledge for AI coding agents — which APIs to use, in what order, and what to avoid. Covers SMS, Voice, WhatsApp, Verify, SendGrid, Compliance, and 30+ products.

57 skills · 1 MCP server

anthropics/knowledge-work-plugins 35,601

ra-qm-skills

claude

14 regulatory affairs & quality management skills for HealthTech/MedTech: ISO 13485 QMS, MDR 2017/745, FDA 510(k)/PMA, GDPR/DSGVO, ISO 27001 ISMS, CAPA management, risk management, clinical evaluation, SOC 2 compliance.

21 skills

alirezarezvani/claude-skills 29,725

Maintain grc?

This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.

claude & codex pluginslisted