Search everything...

Stats

Actions

Available In

grc-diagrams

Editable draw.io diagram skills for GRC system boundaries, evidence flows, control maps, risks, audits, crosswalks, TPRM, POA&M, data flows, RACI, and operating models.

Publisher marketplacegrc-diagrams@grc-engineering-suite · marketplace and plugin share one repository (vantainc/claude-grc-engineering)

npx claudepluginhub vantainc/claude-grc-engineering --plugin grc-diagrams

Popularity

Stars

Med: 0·Avg: 488

Copy clicks

Med: 0·Avg: 1

What's Inside

Slash Commands13

Audit Workflow

/audit-workflow

Create an editable draw.io grc audit workflow diagram for GRC professionals

Control Map

/control-map

Create an editable draw.io grc control map diagram for GRC professionals

Regulated Data Flow

/data-flow

Create an editable draw.io grc regulated data flow diagram for GRC professionals

Draw.io

/drawio

Create an editable native draw.io diagram, optionally exported to PNG/SVG/PDF with embedded XML

Evidence Flow

/evidence-flow

Create an editable draw.io grc evidence flow diagram for GRC professionals

Skills13

drawio

/drawio

Always use when the user asks to create, generate, draw, or design a diagram, flowchart, architecture diagram, ER diagram, sequence diagram, class diagram, network diagram, mockup, wireframe, UI sketch, GRC workflow, control map, audit process, risk register flow, compliance architecture, or mentions draw.io, drawio, drawoi, .drawio files, or diagram export to PNG/SVG/PDF.

grc-audit-workflow-diagram

/grc-audit-workflow-diagram

Use when creating a draw.io diagram for audit planning, request lists, evidence, testing, exceptions, remediation, and reporting in a GRC, security, audit, compliance, privacy, cloud, or risk context.

grc-compliance-operating-model-diagram

/grc-compliance-operating-model-diagram

Use when creating a draw.io diagram for high-level GRC program architecture, continuous compliance operating models, three lines of defense, and executive program maps in a GRC, security, audit, compliance, privacy, cloud, or risk context.

grc-control-map-diagram

/grc-control-map-diagram

Use when creating a draw.io diagram for controls mapped across frameworks, systems, owners, risks, and evidence sources in a GRC, security, audit, compliance, privacy, cloud, or risk context.

grc-data-flow-diagram

/grc-data-flow-diagram

Use when creating a draw.io diagram for regulated data flows, data classifications, storage, processing, transfer, access, retention, and logging in a GRC, security, audit, compliance, privacy, cloud, or risk context.

The plugin manifest points to a different repository than the source indexed by ClaudePluginHub.

Stats

Version0.1.0

Stars0

MaintenanceFair

LicenseMIT

Last CommitMay 3, 2026

AddedJul 18, 2026

Actions

View on GitHub View README Plugin Marketplace JSON

Own this plugin?

Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).

Available In

grc-engineering-suite

README

claude-grc-engineering

CodeRabbit Pull Request Reviews

https://github.com/user-attachments/assets/a83aa297-9fba-4a7d-b56c-06f962d1ec6b

Open-source GRC automation for Claude Code.

claude-grc-engineering turns technical evidence from cloud, SaaS, code, and security tools into framework-aligned findings, gap reports, remediation guidance, evidence packages, and OSCAL workflows.

It is maintained by the GRC Engineering Club for people who want compliance work to behave more like engineering work: repeatable, testable, versioned, and easy to extend.

Not affiliated with Anthropic. Claude, Anthropic, and related marks are property of their respective owners.

What it does

The toolkit is a Claude Code plugin marketplace. Install the pieces you need:

grc-engineer: the core automation hub for gap assessment, IaC scanning, evidence collection, remediation generation, policy generation, PR review, continuous monitoring, and multi-framework optimization.
Persona plugins: workflows for auditors, internal GRC teams, third-party risk, reporting, learning, and iterative GRC automation.
Framework plugins: reference guidance for SOC 2, NIST 800-53, ISO 27001, FedRAMP, PCI DSS, CMMC, HITRUST, CIS Controls, GDPR, DORA, HIPAA Security, regional privacy/security regimes, and more.
Connector plugins: thin wrappers around tools such as AWS CLI, GitHub CLI, gcloud, Azure CLI, Okta, Slack, Datadog, CrowdStrike, Drata, Splunk, Tenable, Snowflake, and POA&M automation.
Diagram plugins: editable draw.io system boundaries, evidence flows, control maps, risk treatment, audit workflows, framework crosswalks, TPRM, POA&M, data flows, RACI, and operating model visuals.
OSCAL and bridge plugins: tooling for FedRAMP/OSCAL workflows and integrations with external GRC systems.

The common path is:

connectors collect evidence
        ↓
findings match schemas/finding.schema.json
        ↓
grc-engineer maps findings through SCF
        ↓
reports, remediation, evidence packages, OSCAL outputs

The Secure Controls Framework (SCF) crosswalk is used as the control backbone: 1,468 controls mapped to 249 frameworks. The toolkit references control IDs and implementation guidance; it does not reproduce copyrighted standards text.

Install in 60 seconds

Inside Claude Code:

/plugin marketplace add GRCEngClub/claude-grc-engineering
/plugin install grc-engineer@grc-engineering-suite

For a first run without cloud credentials, use GitHub as the evidence source:

/plugin install github-inspector@grc-engineering-suite
/plugin install soc2@grc-engineering-suite
/github-inspector:setup
/github-inspector:collect --scope=@me
/grc-engineer:gap-assessment SOC2 --sources=github-inspector

Full walkthrough: docs/QUICKSTART.md.

Using Claude Cowork instead of Claude Code? Start with docs/CLAUDE-COWORK.md.

Common workflows

View full README on GitHub

Similar Plugins

creative-writing

28·90·

Complete creative writing suite with 10 specialized agents covering the full writing process: research gathering, character development, story architecture, world-building, dialogue coaching, editing/review, outlining, content strategy, believability auditing, and prose style/voice analysis. Includes genre-specific guides, templates, and quality checklists.

5mo

v1.7.0

greyhaven-ai

fullstack-dev-skills

10.6k·700·

Comprehensive skill pack with 66 specialized skills for full-stack developers: 12 language experts (Python, TypeScript, Go, Rust, C++, Swift, Kotlin, C#, PHP, Java, SQL, JavaScript), 10 backend frameworks, 6 frontend/mobile, plus infrastructure, DevOps, security, and testing. Features progressive disclosure architecture for 50% faster loading.

1mo

v0.4.15

Jeffallan

drawio-diagramming

12·160·

Intelligent draw.io diagramming plugin with AI-powered diagram generation, multi-platform embedding (GitHub, Confluence, Azure DevOps, Notion, Teams, Harness), conditional formatting, live data binding, and MCP server integration for programmatic diagram creation and management.

3mo

v2.0.0

markus41

nature-skills

20.0k·420·

A growing collection of Claude-compatible academic workflow bundles. Covers scientific figures, manuscript writing and polishing, reviewer assessment, citation retrieval, data availability, paper reading, literature search, response letters, paper-to-PPTX conversion, and evidence-grounded Chinese invention patent drafting. Rules are organized as reusable skill folders with explicit workflows and quality checks.

v1.0.0

Yuan1z0825

context7-plugin

55.5k·337·

Upstash Context7 MCP server for up-to-date documentation lookup. Pull version-specific documentation and code examples directly from source repositories into your LLM context.

4mo

[email protected]

upstash

claude-council

500·275·

Consult multiple AI coding agents (Gemini, OpenAI, Grok, Perplexity, plus codex, antigravity, and grok CLIs when installed) to get diverse perspectives on coding problems

v2026.7.8

hex

grc-diagrams

Popularity

What's Inside

Confidence

README

claude-grc-engineering

What it does

Install in 60 seconds

Common workflows

Similar Plugins

creative-writing

fullstack-dev-skills

drawio-diagramming

nature-skills

context7-plugin

claude-council

More by VantaInc

vanta

pci-dss

grc-loop

grc-reporter

pbmm

claude-grc-engineering

What it does

Install in 60 seconds

Common workflows

Popularity

Health & Quality

More by VantaInc

vanta

pci-dss

grc-loop

grc-reporter

pbmm

Similar Plugins

creative-writing

fullstack-dev-skills

drawio-diagramming

nature-skills

context7-plugin

claude-council