Stats
Actions
Tags
Help us improve
Share bugs, ideas, or general feedback.
From grc-auditor
Generates professional audit findings in Condition-Criteria-Cause-Effect (CCCE) format with severity levels, management letter comments, remediation recommendations, and risk assessments.
npx claudepluginhub grcengclub/claude-grc-engineering --plugin grc-auditorHow this skill is triggered — by the user, by Claude, or both
Slash command
/grc-auditor:finding-generatorThis skill is limited to the following tools:
The summary Claude sees in its skill listing — used to decide when to auto-load this skill
Creates professional audit findings and management letter comments.
Guides privacy audit findings remediation: prioritizes by severity (critical, high, medium, low), assigns owners, tracks deadlines, verifies fixes, applies closure criteria, and escalates overdue items.
Guides writing structured security findings with title conventions, sections, and severity classification. Helps format standalone vulnerability reports.
Activate for: audit, audit preparation, audit pack, internal audit, external audit, regulatory audit, supervisory visit, audit evidence, audit trail, audit readiness, mock audit, audit findings, audit response, audit remediation, audit committee, board audit, annual audit, ISO audit, surveillance audit, certification audit, regulator visit, FCA visit, BSI audit, PCI audit, SOC 2 audit, audit questionnaire, evidence inventory. NOT for: compliance obligation mapping (use official compliance-tracking auto-skill), vendor evaluation (use official /vendor-review), risk register building (use official risk-assessment auto-skill).
Share bugs, ideas, or general feedback.
Creates professional audit findings and management letter comments.
When documenting an access control finding: