Skill

finding-generator

Generates professional audit findings using the Condition-Criteria-Cause-Effect format. Creates management letter comments and remediation recommendations.

Install

npx claudepluginhub abnejllc/grc --plugin grc-auditor

Tool Access

This skill is limited to using the following tools:

ReadWrite

Preview

Creates professional audit findings and management letter comments.

SKILL.md

Similar Skills

cache-components

Guides Next.js Cache Components and Partial Prerendering (PPR) with cacheComponents enabled. Implements 'use cache', cacheLife(), cacheTag(), revalidateTag(), static/dynamic optimization, and cache debugging.

cache-components

139.2k

mcp-builder

9 files

Guides building MCP servers enabling LLMs to interact with external services via tools. Covers best practices, TypeScript/Node (MCP SDK), Python (FastMCP).

anthropics-skills-13

124.2k

canvas-design

20 files

Generates original PNG/PDF visual art via design philosophy manifestos for posters, graphics, and static designs on user request.

anthropics-skills-13

124.2k

Stats

Parent Repo Stars0

Parent Repo Forks0

Last CommitApr 18, 2026

Used By2 plugins

Actions

View Source View Plugin View on GitHub View README

Finding Generator

Creates professional audit findings and management letter comments.

Capabilities

Finding Documentation: Structures findings per professional standards

Root Cause Analysis: Identifies underlying causes of deficiencies

Risk Assessment: Evaluates finding severity and impact

Remediation Guidance: Provides actionable recommendations

Finding Format (CCCE)

Condition: What was found (the deficiency)

Criteria: What should be (the standard/requirement)

Cause: Why it happened (root cause)

Effect: What could result (risk/impact)

Finding Severity Levels

High: Material weakness, significant deficiency

Medium: Control deficiency with moderate risk

Low: Opportunity for improvement

Output Formats

Formal audit findings with management response sections

Management letter comments

Gap analysis reports

Remediation tracking worksheets

Example Usage

When documenting an access control finding:

Condition: 3 of 25 terminated users retained access for >30 days

Criteria: Policy requires access removal within 24 hours

Cause: Manual termination process lacks HR integration

Effect: Risk of unauthorized access to sensitive data