claude-grc-plugin

Run `npx skills add mlunato47/claude-grc-plugin --all -g -y` in your terminal to install all skills in this suite globally.

It covers 18 frameworks including NIST 800-53 Rev 5, FedRAMP Rev 5 and 20x, CMMC 2.0, SOC 2, ISO 27001, PCI DSS v4, HIPAA, GDPR, CIS Controls, and OSCAL.

Use the map-controls command with a source and target framework, and it routes the mapping through NIST 800-53 as the universal hub.

Yes. It checks structural completeness, language quality, and field coverage, and scores control narratives on a 0-5 maturity scale without judging your actual security posture.

Yes. Review commands display a redaction reminder and only assess document structure, so you can safely use placeholders instead of real system names or IPs.