evidence-artifact-collector

Generate CLI commands and API scripts to collect cloud audit evidence.

367|83|Updated Dec 26, 2025
One-click install
npx skills add https://github.com/GRCEngClub/claude-grc-engineering --skill evidence-artifact-collector-grcengclub
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: evidence-artifact-collector
Source: https://github.com/GRCEngClub/claude-grc-engineering/tree/main/plugins/grc-engineer/skills/evidence-artifact-collector
Command: npx skills add https://github.com/GRCEngClub/claude-grc-engineering --skill evidence-artifact-collector-grcengclub

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

Automates the tedious process of manually collecting audit evidence across cloud platforms, reducing time and human error.

Core Features & Use Cases

  • Generate CLI commands and API scripts to collect point-in-time evidence across AWS, Azure, and GCP
  • Produce formatted reports and crosswalks to security controls for audits
  • Use case: accelerate SOC 2, FedRAMP, or ISO 27001 readiness with repeatable evidence collection

Quick Start

Run the tool to generate an evidence collection script for AWS by specifying a control like 'MFA for root users'.

Frequently Asked Questions about evidence-artifact-collector

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate cloud audit evidence collection across AWS, Azure, and GCP?

Automate cloud audit evidence collection by running scripted workflows that generate point-in-time API scripts for AWS, Azure, and GCP. This produces unified evidence reports and crosswalks to security controls for compliance audits.

Can I use this to generate evidence scripts for specific security controls like MFA for root users?

Yes, you can generate targeted evidence collection scripts for specific security controls like MFA for root users. Specify the required control during execution to output the relevant CLI commands and API scripts for your cloud provider.

What's the best way to prepare for SOC 2, FedRAMP, or ISO 27001 audits across multiple cloud platforms?

Prepare for SOC 2, FedRAMP, or ISO 27001 audits by using repeatable evidence collection workflows. These workflows automate cross-cloud data gathering and map findings directly to required security control crosswalks.

Do I need Node.js to run the cross-cloud evidence collection scripts?

Yes, you need Node.js to run the evidence collection scripts. The automation requires executing a Node.js script located in the scripts directory along with a minimal provider configuration to gather point-in-time audit data.

How does crosswalk mapping to security controls work for cloud audit evidence?

Crosswalk mapping to security controls works by linking collected point-in-time cloud evidence to specific compliance framework requirements. The generated reports align raw AWS, Azure, and GCP data with audit-ready control objectives.