Claude Skills for GRC
Claude Skills for Governance, Risk & Compliance (GRC)
A set of governance, risk and compliance skills: ISO 27001, SOC 2, GDPR, HIPAA, PCI DSS, NIST, the EU AI Act and other frameworks
- 1,070 ★ on the repository
- Last commit
- MIT
Minimal access
Why this level
- The skills consist of instructions and reference material on regulatory frameworks and run no code of their own
Install
- Works in
Manual install
/plugin marketplace add Sushegaad/Claude-Skills-Governance-Risk-and-Compliance
/plugin install iso27001@grc-skills soc2@grc-skills gdpr-compliance@grc-skillsThe marketplace is named grc-skills. Install only the frameworks you need; the skill names are listed in the README.
Access and checks
How we reviewMinimal accessThe tool runs nothing and makes no network calls.
- The skills consist of instructions and reference material on regulatory frameworks and run no code of their own
This is third-party code. Review the repository files before installing.
What it does
The set turns Claude into a compliance assistant across dozens of regulatory frameworks at once: ISO 27001 and 27701, SOC 2, FedRAMP, GDPR, HIPAA, NIST CSF and 800-53, PCI DSS, CMMC 2.0, DORA, the EU AI Act, ISO 42001, CCPA, LGPD and many more. Each skill runs a structured gap analysis against the chosen framework, drafts policies and procedures with the required blocks and sections, documents controls in an audit-ready format, builds risk registers and treatment plans, and assembles evidence checklists. Skills load automatically when the conversation touches their topic and cite specific clauses of the standards. They install as .skill files in the Claude apps or as plugins through the marketplace in Claude Code, and are updated regularly.
Who it is for. For information security, privacy and compliance professionals, plus developers and advisors who need verifiable answers about regulatory frameworks.
Good fit when
- You need a gap analysis against ISO 27001, SOC 2 or another framework
- You need draft policies, a risk register or an evidence checklist for certification
- You need an answer on specific framework requirements with clause references
Not a fit when
- You need formal legal advice or a certified auditor's opinion
- Your task is unrelated to regulatory compliance and risk management
Example request
Run a gap analysis of our system against ISO 27001 2022 and draft an access control policyLimitations
The skills give expert orientation and drafts but do not replace a formal audit, legal advice or certification. The material covers international and industry frameworks and does not include Russian requirements. Outputs should be checked against current standard texts, since regulators update their requirements.
How to disable. Disable or remove the unneeded .skill files in the Claude apps, and if installed via the marketplace, remove the plugins with /plugin.
FAQ
Will this replace an auditor or a lawyer?
No. The skills speed up preparation: gap analysis, draft policies, risk registers and evidence checklists. They do not replace a formal audit, certification or legal opinion.
Do I have to install all the skills?
No. You can install only the frameworks you need, for example ISO 27001 and SOC 2, via individual .skill files or the marketplace.
Discussion
No questions or reviews yet.
Related
SkillsClaude Code CyberSecurity Skills
Claude Code CyberSecurity Skill Collection
A set of 22 cybersecurity skills for Claude Code: recon, vulnerability assessment, incident response, red and blue team, malware analysis
An open library of 65 governance, risk and compliance skills: the agent drafts and gathers, while people make the calls.
An open set of Claude Code plugins for compliance: findings from cloud and SaaS, gap reports and OSCAL output
Security audit skill with GOST and FSTEC
Security Audit Skill for Claude Code
A security audit skill for Claude Code: OWASP Top 10 plus GOST R 56939, FSTEC Order No. 21 and 152-FZ, parallel subagents and a compliance matrix
A Claude Code and OpenCode plugin making an agent a compliance analyst: 18 frameworks, 24 commands, SSP, POA&M and policy review.
A library of offensive security skills for the Claude Skills system: red team methodology across dozens of areas
Comparison with similar tools
Cards that share the main search query, and how they differ.
| Tool | Official | Repository stars | Main difference |
|---|---|---|---|
| Claude Skills for GRC (this card) | no | 1,070 | |
| Claude Skills for full-stack developers | no | 12,342 | 67 skills |
| Claude Skills by borghei | no | 1,108 | team skills |
README in short
The README describes a large set of Claude skills for governance, risk and compliance, covering dozens of frameworks from ISO 27001 and SOC 2 to the EU AI Act and various national industry rules. Skills are explained as installable knowledge packages that load automatically and work by progressive disclosure: a main SKILL.md plus references loaded on demand. Installation is by downloading a .skill file and uploading it to a Claude app, or through the marketplace in Claude Code with the grc-skills manifest. The author reports an in-house benchmark over 180 scenarios where the skill-assisted setup scored higher than the baseline model without skills. MIT licensed, updated monthly.