From grc-reporter
Audience-specific tone and format guidance for leadership communications. Use when drafting any /report:* output to tune length, framing, and technical depth to the reader (board, audit committee, CEO, weekly CISO, regulator).
npx claudepluginhub abnejllc/grc --plugin grc-reporterThis skill is limited to using the following tools:
Different readers want different things. The same findings should not land the same way in a board deck, a CISO 1:1, and a regulator response.
Guides Next.js Cache Components and Partial Prerendering (PPR) with cacheComponents enabled. Implements 'use cache', cacheLife(), cacheTag(), revalidateTag(), static/dynamic optimization, and cache debugging.
Guides building MCP servers enabling LLMs to interact with external services via tools. Covers best practices, TypeScript/Node (MCP SDK), Python (FastMCP).
Generates original PNG/PDF visual art via design philosophy manifestos for posters, graphics, and static designs on user request.
Different readers want different things. The same findings should not land the same way in a board deck, a CISO 1:1, and a regulator response.
| Audience | Length budget | Opening line wants | Technical depth | What they skip |
|---|---|---|---|---|
| Full board | 1 page max | Strategic posture one-liner | Low. No control IDs in body. | Operational detail, acronyms, tables with >5 rows |
| Audit committee | 2 pages | Risk-and-assurance posture | Medium. Control families OK, not IDs. | Strategy monologue, vendor names unless load-bearing |
| Risk committee | 2 pages | Residual risk movement | Medium-high. Framework names, risk scoring. | Program branding, tool selection detail |
| CEO weekly | Half page | What changed, what's blocking, what's asked | Low. Translate everything. | Framework politics, tool comparisons |
| CISO weekly | 1 page | What moved, what's blocked, what's next | High. Control IDs, tool names, owner names fine. | Over-explained context |
| Regulator / auditor | As long as needed | Precise scope + evidence | Maximum. IDs, artifact paths, timestamps. | Narrative softening |
Board and audit committee
CEO weekly
CISO weekly
Regulator / auditor
YYYY-MM-DD. Periods are YYYY-Q# or YYYY-W##.If you cannot defend every sentence as "the audience needed this to make a decision," cut it.
If the document opens with context before the point, invert it.
If there are three open items and no ask, you are reporting, not communicating. Add the ask.