GRCEngClub/claude-grc-engineering
Open-source GRC toolkit from the GRC Engineering Club. Claude Code plugins for evidence collection, SCF crosswalks, multi-framework gap reports, OSCAL workflows.
ARCHETYPE
Skill Collector
Ten-plus skills loaded on demand. A procedural-knowledge library.
Copy this rig
# review before running: this installs third-party code
$ claude mcp add --transport http linear-grc-club https://mcp.linear.app/mcp MCP servers are added to Claude Code at local scope; env vars are shown as YOUR_… placeholders — we never store values. Files are fetched with degit into a separate folder so you can review before merging.
$ claude mcp add --transport http linear-grc-club https://mcp.linear.app/mcp $ npx degit GRCEngClub/claude-grc-engineering/plugins/academic-research-companion/skills/academic-research-companion .claude/skills/academic-research-companion $ npx degit GRCEngClub/claude-grc-engineering/plugins/connectors/aws-inspector/skills/aws-inspector-expert .claude/skills/aws-inspector-expert $ npx degit GRCEngClub/claude-grc-engineering/plugins/connectors/aws-secrets-inspector/skills/aws-secrets-inspector-expert .claude/skills/aws-secrets-inspector-expert $ npx degit GRCEngClub/claude-grc-engineering/plugins/connectors/azure-inspector/skills/azure-inspector-expert .claude/skills/azure-inspector-expert $ npx degit GRCEngClub/claude-grc-engineering/plugins/connectors/crowdstrike-inspector/skills/crowdstrike-inspector-expert .claude/skills/crowdstrike-inspector-expert $ npx degit GRCEngClub/claude-grc-engineering/plugins/connectors/datadog-inspector/skills/datadog-inspector-expert .claude/skills/datadog-inspector-expert $ npx degit GRCEngClub/claude-grc-engineering/plugins/connectors/drata-inspector/skills/drata-inspector-expert .claude/skills/drata-inspector-expert $ npx degit GRCEngClub/claude-grc-engineering/plugins/connectors/gcp-inspector/skills/gcp-inspector-expert .claude/skills/gcp-inspector-expert $ npx degit GRCEngClub/claude-grc-engineering/plugins/connectors/github-inspector/skills/github-inspector-expert .claude/skills/github-inspector-expert $ npx degit GRCEngClub/claude-grc-engineering/plugins/connectors/okta-inspector/skills/okta-inspector-expert .claude/skills/okta-inspector-expert $ npx degit GRCEngClub/claude-grc-engineering/plugins/connectors/poam-automation/skills/poam-automation-expert .claude/skills/poam-automation-expert $ npx degit GRCEngClub/claude-grc-engineering/plugins/connectors/slack-inspector/skills/slack-inspector-expert .claude/skills/slack-inspector-expert $ npx degit GRCEngClub/claude-grc-engineering/plugins/connectors/snowflake-inspector/skills/snowflake-inspector-expert .claude/skills/snowflake-inspector-expert $ npx degit GRCEngClub/claude-grc-engineering/plugins/connectors/splunk-inspector/skills/splunk-inspector-expert .claude/skills/splunk-inspector-expert $ npx degit GRCEngClub/claude-grc-engineering/plugins/connectors/tenable-inspector/skills/tenable-inspector-expert .claude/skills/tenable-inspector-expert $ npx degit GRCEngClub/claude-grc-engineering/plugins/connectors/testssl-inspector/skills/testssl-inspector-expert .claude/skills/testssl-inspector-expert $ npx degit GRCEngClub/claude-grc-engineering/plugins/connectors/wiz-inspector/skills/wiz-inspector-expert .claude/skills/wiz-inspector-expert $ npx degit GRCEngClub/claude-grc-engineering/plugins/fedramp-ssp/skills/fedramp-ssp-expert .claude/skills/fedramp-ssp-expert $ npx degit GRCEngClub/claude-grc-engineering/plugins/frameworks/au-apra-cps-234/skills/au-apra-cps-234-expert .claude/skills/au-apra-cps-234-expert $ npx degit GRCEngClub/claude-grc-engineering/plugins/frameworks/ch-fadp/skills/ch-fadp-expert .claude/skills/ch-fadp-expert $ npx degit GRCEngClub/claude-grc-engineering/plugins/frameworks/cis-controls/skills/cis-expert .claude/skills/cis-expert $ npx degit GRCEngClub/claude-grc-engineering/plugins/frameworks/cmmc/skills/cmmc-assessment-objectives .claude/skills/cmmc-assessment-objectives $ npx degit GRCEngClub/claude-grc-engineering/plugins/frameworks/cmmc/skills/cmmc-expert .claude/skills/cmmc-expert $ npx degit GRCEngClub/claude-grc-engineering/plugins/frameworks/csa-ccm/skills/ccm-expert .claude/skills/ccm-expert $ npx degit GRCEngClub/claude-grc-engineering/plugins/frameworks/cyber-essentials-plus/skills/cyber-essentials-plus-expert .claude/skills/cyber-essentials-plus-expert $ npx degit GRCEngClub/claude-grc-engineering/plugins/frameworks/dora/skills/dora-expert .claude/skills/dora-expert $ npx degit GRCEngClub/claude-grc-<redacted>-expert .claude/skills/essential8-expert $ npx degit GRCEngClub/claude-grc-engineering/plugins/frameworks/eu-nis2/skills/eu-nis2-expert .claude/skills/eu-nis2-expert $ npx degit GRCEngClub/claude-grc-engineering/plugins/frameworks/fedramp-20x/skills/fedramp-20x-expert .claude/skills/fedramp-20x-expert $ npx degit GRCEngClub/claude-grc-engineering/plugins/frameworks/fedramp-rev5/skills/fedramp-rev5-expert .claude/skills/fedramp-rev5-expert $ npx degit GRCEngClub/claude-grc-engineering/plugins/frameworks/gdpr/skills/gdpr-expert .claude/skills/gdpr-expert $ npx degit GRCEngClub/claude-grc-engineering/plugins/frameworks/glba/skills/glba-expert .claude/skills/glba-expert $ npx degit GRCEngClub/claude-grc-<redacted>-expert .claude/skills/hitrust-expert $ npx degit GRCEngClub/claude-grc-engineering/plugins/frameworks/ind-dpdpa/skills/ind-dpdpa-expert .claude/skills/ind-dpdpa-expert $ npx degit GRCEngClub/claude-grc-engineering/plugins/frameworks/irap/skills/irap-expert .claude/skills/irap-expert $ npx degit GRCEngClub/claude-grc-<redacted>-expert .claude/skills/ismap-expert $ npx degit GRCEngClub/claude-grc-<redacted>-expert .claude/skills/iso-expert $ npx degit GRCEngClub/claude-grc-engineering/plugins/frameworks/jp-appi/skills/jp-appi-expert .claude/skills/jp-appi-expert $ npx degit GRCEngClub/claude-grc-engineering/plugins/frameworks/nist-800-53/skills/nist-expert .claude/skills/nist-expert $ npx degit GRCEngClub/claude-grc-engineering/plugins/frameworks/nist-ai-rmf/skills/nist-ai-rmf-expert .claude/skills/nist-ai-rmf-expert
This rig commits no guardrails. Here is the community baseline instead — the deny/ask rules most often found across all 7,204 rigs:
{
"permissions": {
"deny": [
"Read(./.env)",
"Read(**/.env)",
"Read(~/.ssh/**)",
"Bash(rm -rf *)",
"Read(**/*.pem)",
"Bash(rm -rf /)",
"Bash(git push --force:*)",
"Bash(sudo *)",
"Read(.env)",
"Bash(rm -rf /*)",
"Read(./.env.*)",
"Read(~/.aws/**)",
"Bash(git push --force*)",
"Bash(rm -rf:*)",
"Read(**/*.key)",
"Read(**/.env.*)",
"Bash(sudo:*)",
"Bash(git reset --hard*)",
"Bash(git reset --hard:*)",
"Read(.env.*)"
],
"ask": [
"Bash(git push:*)",
"Bash(git push *)",
"Bash(git commit:*)",
"Bash(rm *)",
"Bash(rm:*)",
"Bash(git rebase *)",
"Bash(wget *)",
"Bash(npm publish:*)",
"Bash(git commit *)",
"Bash(gh pr merge *)"
]
}
} MCP servers (1)
| server | source | est. tokens |
|---|---|---|
| Linear · "linear-grc-club" | remote · remote | 5.5k |
Skills (101)
academic-research-companionaws-inspector-expertaws-secrets-inspector-expertazure-inspector-expertcrowdstrike-inspector-expertdatadog-inspector-expertdrata-inspector-expertgcp-inspector-expertgithub-inspector-expertokta-inspector-expertpoam-automation-expertslack-inspector-expertsnowflake-inspector-expertsplunk-inspector-experttenable-inspector-experttestssl-inspector-expertwiz-inspector-expertfedramp-ssp-expertau-apra-cps-234-expertch-fadp-expertcis-expertcmmc-assessment-objectivescmmc-expertccm-expertcyber-essentials-plus-expertdora-expertessential8-experteu-nis2-expertfedramp-20x-expertfedramp-rev5-expertgdpr-expertglba-experthitrust-expertind-dpdpa-expertirap-expertismap-expertiso-expertjp-appi-expertnist-expertnist-ai-rmf-expertnist-csf-20-expertnydfs-expertpbmm-expertpci-dss-expertsg-mas-trm-expertsingapore-pdpa-expertsoc2-expertstateramp-expertus-ccpa-expertus-export-expertus-finra-expertus-hipaa-securityus-nerc-cip-expertus-sox-expertcontrol-testerevidence-validatorfinding-generatordrawiogrc-audit-workflow-diagramgrc-compliance-operating-model-diagramgrc-control-map-diagramgrc-data-flow-diagramgrc-evidence-flow-diagramgrc-framework-crosswalk-diagramgrc-poam-diagramgrc-raci-diagramgrc-ri<redacted>grc-shared-responsibility-diagramgrc-system-boundary-diagramgrc-third-party-risk-diagramaccess-review-triageaudit-ready-pr-reviewercode-to-control-mapperevidence-artifact-collectorinterview-question-generatorpolicy-as-code-generatorri<redacted>compliance-trackerpolicy-lifecycleri<redacted>grc-portfolio-plannerwebsite-buildwebsite-cicdwebsite-deploywebsite-infrawebsite-preflightwebsite-repoautomation-coverage-analysiscontext-bootstrapexec-narrative-patternsprogram-portfolio-compositionso-what-translationquestionnaire-analyzertprm-scorervendor-assessorgcp-docs-expertoscal-expertcontrol-explainerframework-tutorsocratic-drilltrust-center
Similar rigs
brettdavies/cursor-template
Starter template of Cursor rules and MCP config for new projects: opinionated .mdc rulesets for git conventions and workflow, SQL (formatting, functions, migrations, RLS policies), and current-datetime handling.
Pragmatist 7.4k tok ·
heypoom/dotfiles
Poom's Neovim, Tmux, Fish and other configurations for macOS & Linux. Literally my entire world.
Pragmatist 24.3k tok ·
just-be-dev/workspace
Where my work happens
Pragmatist 5.6k tok ·
snics/dotfiles
—
YOLO Cowboy 25.9k tok ·