Stats
Actions
Tags
From grc-auditor
Generates professional audit findings in Condition-Criteria-Cause-Effect (CCCE) format with severity levels, management letter comments, remediation recommendations, and risk assessments.
How this skill is triggered — by the user, by Claude, or both
Slash command
/grc-auditor:finding-generatorThis skill is limited to the following tools:
The summary Claude sees in its skill listing — used to decide when to auto-load this skill
Creates professional audit findings and management letter comments.
Creates professional audit findings and management letter comments.
When documenting an access control finding:
npx claudepluginhub grcengclub/claude-grc-engineering --plugin grc-auditorGuides privacy audit findings remediation: prioritizes by severity (critical, high, medium, low), assigns owners, tracks deadlines, verifies fixes, applies closure criteria, and escalates overdue items.
Guides writing structured security findings with title conventions, sections, and severity classification. Helps format standalone vulnerability reports.
Activate for: audit, audit preparation, audit pack, internal audit, external audit, regulatory audit, supervisory visit, audit evidence, audit trail, audit readiness, mock audit, audit findings, audit response, audit remediation, audit committee, board audit, annual audit, ISO audit, surveillance audit, certification audit, regulator visit, FCA visit, BSI audit, PCI audit, SOC 2 audit, audit questionnaire, evidence inventory. NOT for: compliance obligation mapping (use official compliance-tracking auto-skill), vendor evaluation (use official /vendor-review), risk register building (use official risk-assessment auto-skill).