Claude Skills Governance Risk And Compliance plugin for Grok Build

Community Claude Code plugin, installs in GrokPluginSecurity

Claude Skills for Governance, Risk, & Compliance (GRC): Expert-level compliance guidance for ISO 27001, SOC 2, FedRAMP, GDPR, HIPAA, NIST CSF, PCI DSS, EU AI Act, ISO 42001, ISO 27701, DORA, CSRD, India's DPDPA, CMMC 2.0, NIST AI Risk, SWIFT, CCPA/CPRA, and others. Benchmark 89% (with skills) vs 55% (without skills). Updated Monthly.

How to install Claude Skills Governance Risk And Compliance in Grok Build

1. Add this repo as a plugin marketplace in Grok Build (once per computer):

grok plugin marketplace add Sushegaad/Claude-Skills-Governance-Risk-and-Compliance

2. Install the plugin:

grok plugin install iso27001@Sushegaad/Claude-Skills-Governance-Risk-and-Compliance --trust
✓ Install-checked in Grok Buildchecked Oct 18, 2026

Review before you trust it. --trust lets this plugin's hooks, MCP servers and scripts run code on your computer. It's a community repo that neither xAI nor GrokStacks has reviewed, so read its code first.

This repo's marketplace has 36 plugins; we checked fedramp, iso27001, soc2. Install another the same way: grok plugin install <name>@Sushegaad/Claude-Skills-Governance-Risk-and-Compliance --trust (names under 'What it contains'). Then start a new Grok session, or press r in /plugins, to load it.

Inside Grok Build: type /plugins, open the Marketplace tab, press a and add Sushegaad/Claude-Skills-Governance-Risk-and-Compliance, then select iso27001 and press i.

Command format: Grok Build's plugin guide

What we checked: on Oct 18, 2026 it installed with grok 1.0.62 and Grok found 3 skills. That's an install check only: we haven't run it in a live Grok session.

What it contains

Skills (3)

  • iso27001 — Expert ISO 27001 compliance assistant for security and compliance teams. Use this skill whenever a user asks about ISO 27001 or ISO/IEC 27001, including any of the following: gap analysis, auditing, compliance assessments, control checklist
  • soc2 — Expert SOC 2 compliance assistant covering all five Trust Services Criteria (Security/CC, Availability/A, Confidentiality/C, Processing Integrity/PI, Privacy/P). Use this skill whenever a user mentions SOC 2, Trust Services Criteria, SOC 2
  • fedramp — Expert guidance for FedRAMP certification and compliance under CR26 (FedRAMP Consolidated Rules for 2026). Use this skill whenever a user asks about FedRAMP authorization, ATO (Authority to Operate), cloud security for federal government, N

Plugins in this marketplace (36)

  • iso27001 — Expert ISO 27001 gap analysis, policy writing, Annex A control guidance, SoA generation, and risk register creation for both 2013 and 2022 versions.
  • soc2 — Expert SOC 2 compliance advisor covering all Trust Services Criteria — gap analysis, policy drafting, control documentation, audit evidence, and vendor risk.
  • fedramp — End-to-end FedRAMP authorization guidance — readiness assessments, SSP narratives, POA&M management, NIST 800-53 Rev 5 control mapping, and ConMon support.
  • gdpr-compliance — GDPR compliance assistant — code and system audits, privacy notice drafting, DPAs, DPIAs, data flow reviews, and authoritative article-cited Q&A.
  • hipaa-compliance — HIPAA compliance advisor covering Privacy Rule, Security Rule, and Breach Notification — document generation, technical safeguards for cloud, and breach response.
  • nist-csf — NIST Cybersecurity Framework (CSF 2.0 and 1.1) advisor — gap assessments, organisational profiles, implementation tiers, roadmaps, cross-framework mapping, and cybersecurity policy generation.
  • pci-compliance — PCI DSS v4.0.1 compliance advisor — CDE scoping, SAQ selection, gap assessments, control implementation guidance, QSA audit preparation, and remediation planning.
  • tsa-compliance — TSA cybersecurity compliance advisor for critical infrastructure — pipeline, freight rail, and transit Security Directive requirements including CIP/COIP, IRP, ADR, CAP, incident reporting, and OT/ICS security.
  • iso27701 — ISO 27701 Privacy Information Management System (PIMS) advisor — gap analysis, PIMS implementation, Annex A control guidance (A.1 controller, A.2 processor, A.3 security), SoA generation, privacy risk assessment, GDPR alignment, 2019→2025 transition, and certification readiness.
  • iso42001 — ISO 42001 AI Management System (AIMS) advisor — gap analysis, AI risk assessment, AI system impact assessment (AISIA), Annex A control guidance, SoA generation, policy writing, and certification readiness for ISO/IEC 42001:2023.
  • dpdpa — India's Digital Personal Data Protection Act, 2023 (DPDPA) and DPDP Rules, 2025 compliance advisor — gap analysis, notice and consent requirements, Data Principal rights, breach notification, children’s data, Significant Data Fiduciary obligations, cross-border transfers, Data Protection Board proce
  • dora — DORA (Regulation (EU) 2022/2554) compliance advisor for EU financial entities — ICT risk management framework, incident classification and reporting, TLPT, ICT third-party risk, Register of Information, and all adopted RTS/ITS with article-level citations.
  • cmmc — Expert CMMC 2.0 compliance advisor for US defense contractors — gap analysis, SSP drafting, POA&M management, SPRS scoring, CUI scoping, and C3PAO assessment readiness for Level 1, 2, and 3.
  • nist-ai-rmf — Expert NIST AI Risk Management Framework (AI RMF 1.0) advisor — gap assessments, organizational profiles, GOVERN/MAP/MEASURE/MANAGE function guidance, AI risk registers, trustworthiness evaluation, and cross-framework mapping to ISO 42001, EU AI Act, and NIST CSF.
  • swift-csp — Expert SWIFT Customer Security Programme (CSP) advisor — CSCF v2026 gap assessments, mandatory vs advisory controls, architecture type scoping (A1/A2/A3/A4/B), KYC-SA attestation, MFA and access control implementation, log monitoring, and incident response for the global banking network.
  • ism — Expert Australian Information Security Manual (ISM) advisor for Australian government entities, contractors and supply chains. Gap analysis, system authorisation, IRAP preparation, control scoping, and ASD compliance guidance.
  • ccpa — California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) compliance advisor — business threshold analysis, consumer rights fulfillment, privacy notice drafting, service provider classification, sensitive personal information (SPI) handling, opt-out mechanisms (including GPC),
  • nis2 — EU NIS2 Directive (Directive (EU) 2022/2555) compliance advisor for essential and important entities — entity classification, Art. 21 risk management measures, Art. 23 incident reporting timelines (24h/72h/1 month), Art. 20 governance obligations, supply chain security (Art. 26), gap assessments, po
  • itar — Expert ITAR compliance advisor for US defense contractors, exporters, and manufacturers — USML classification, DDTC registration, export license applications (DSP-5/73/94), Technical Assistance Agreements (TAA), Manufacturing License Agreements (MLA), brokering regulations (Part 129), deemed export
  • lgpd — Brazil LGPD (Lei Geral de Proteção de Dados, Law 13,709/2018) compliance advisor — legal basis analysis (Arts. 7 & 11), data subject rights fulfilment (Art. 18), DPO/Encarregado appointment, ANPD breach notification (3-day preliminary / 20-day full report), DPIA/RIPD drafting, international transfer
  • csrd — EU CSRD (Corporate Sustainability Reporting Directive, EU 2022/2464) compliance advisor — scope & threshold analysis (large PIEs, other large, listed SMEs, non-EU), double materiality assessment (DMA), ESRS gap assessment, ESRS E1–E5 environmental disclosures, ESRS S1–S4 social disclosures, ESRS G1
  • cis-controls — CIS Controls v8 (CIS Top 18) advisor — Implementation Group scoping (IG1/IG2/IG3), gap assessments across all 153 safeguards, asset/software inventory, data protection, secure configuration, MFA and access control, vulnerability management, audit log management, malware defenses, incident response,
  • ear — EAR (Export Administration Regulations) compliance advisor — ECCN classification across all 10 CCL categories, EAR99 determination, EAR vs ITAR jurisdiction via Order of Review, licence requirement analysis using the Commerce Country Chart, all 14 licence exceptions (LVS, GBS, CIV, ENC, TMP, GOV, TS
  • nist-800-53 — NIST SP 800-53 Rev 5 compliance advisor — all 20 control families, Low/Moderate/High baseline selection, FIPS 199/200 categorization, control tailoring, ODVs, overlays, privacy controls (PT family), supply chain (SR family), SSP narrative writing, assessment procedures (SP 800-53A), POA&M management
  • eu-ai-act — EU AI Act (Regulation (EU) 2024/1689) compliance advisor — risk classification across all four tiers, all 8 prohibited practices (Art. 5), all 8 Annex III high-risk use case areas, provider and deployer obligations (Arts. 9–17, 26), GPAI model obligations and systemic risk (Arts. 51–55), conformity
  • section-508 — Expert Section 508 compliance advisor for US federal ICT accessibility — VPAT/ACR completion, WCAG 2.0 AA audits, remediation planning, PDF accessibility, procurement language, keyboard and screen reader testing, undue burden assessments, and agency compliance workflows.
  • wcag — Expert WCAG (Web Content Accessibility Guidelines) advisor covering WCAG 2.0, 2.1, and 2.2 — all POUR principles, success criteria, conformance levels (A/AA/AAA), accessibility audits, ARIA patterns, colour contrast, keyboard accessibility, screen reader compatibility, mobile accessibility, cognitiv
  • nzism — Expert New Zealand Information Security Manual (NZISM) advisor for NZ government agencies. Gap analysis, system certification & accreditation, classification framework guidance, control implementation, and GCSB/NCSC NZ compliance.
  • vn-pdpl — Expert Vietnam Personal Data Protection Law (PDPL) compliance advisor for Law No. 91/2025/QH15 and Decree 356/2025/ND-CP. Covers gap analysis, data subject rights, cross-border transfer impact assessments, DPIA, breach notification, and sector-specific rules.
  • eu-cra — Expert EU Cyber Resilience Act (CRA) advisor for Regulation (EU) 2024/2847. Covers product classification, Annex I essential requirements, conformity assessment, CE marking, SBOM, vulnerability handling, ENISA reporting, and support period obligations.
  • saudi-arabia-grc — Saudi Arabia GRC advisor — a compliance router across NCA ECC-2:2024, Saudi PDPL (SDAIA), NCA Cloud Cybersecurity Controls, SAMA Cyber Security Framework, and CST cloud rules. Determines what applies first, then guides gap assessments, breach response, market entry, and ISO 27001/NIST/SOC 2 mapping.
  • uae-grc — UAE GRC advisor — a jurisdiction-first compliance router across the Federal PDPL, DIFC DP Law (as amended 2025), ADGM DP Regulations, CBUAE data and outsourcing rules, the ICT Health Law, and UAE IA/ISR/ADHICS cyber baselines. Determines mainland vs free-zone vs sector obligations first, then guides
  • tisax — TISAX advisor for the automotive supply chain — VDA ISA 6 and the ISA2027 transition, assessment levels AL1-AL3, all 12 labels, maturity scoring with cutback, ENX portal process, corrective windows, and ISO 27001 mapping.
  • tprm — Third-party risk management advisor — vendor tiering, due-diligence questionnaires, SOC 2 Type II report review (exceptions, CUECs, carve-outs, bridge letters), DPA/sub-processor review, contract security addenda, ongoing monitoring and offboarding, mapped to ISO 27001, SOC 2, DORA, NIS2, HIPAA and
  • cyber-essentials — UK Cyber Essentials and Cyber Essentials Plus advisor — the current Danzell question set (v3.3, April 2026) and Willow transition, five control themes, cloud/BYOD/home-working scoping, the 14-day update rule and cloud MFA auto-fails, CE+ audits, pricing, bundled insurance, and PPN 014/MoD/NHS procur
  • sox-itgc — SOX ITGC advisor — the four IT general control domains auditors test for SOX 404 (access, change management, operations, development), system scoping, risk-and-control matrices, control narratives and test scripts, deficiency evaluation (AS 2201 / Reg S-X ladder), remediation planning, filer-status

About this listing

Claude Skills Governance Risk And Compliance is a community plugin on GitHub by Sushegaad, written as a Claude Code plugin that Grok Build installs. We install-checked it in Grok; we haven't run it in a live session or reviewed its code. When we installed it, Grok found 3 skills, 36 plugins in this marketplaces. Its license is MIT. We checked commit aab13e1eb1db. It's one of 79 listings in the Security category on GrokStacks.

Stacks Weekly: every new Grok Build and Codex plugin, every Tuesday.

One short email for GrokStacks and CodexStacks readers, with each new plugin's install line and what it ships. Subscribe and get the free starter list: 20 Grok Build plugins worth installing first.

You'll get a confirmation email first. Unsubscribe anytime.

Claude Skills Governance Risk And Compliance FAQ

How do I install Claude Skills Governance Risk And Compliance in Grok Build?

Add the repo as a marketplace with grok plugin marketplace add Sushegaad/Claude-Skills-Governance-Risk-and-Compliance, then run grok plugin install iso27001@Sushegaad/Claude-Skills-Governance-Risk-and-Compliance --trust. This repo's marketplace has 36 plugins; we checked fedramp, iso27001, soc2. Install another the same way: grok plugin install <name>@Sushegaad/Claude-Skills-Governance-Risk-and-Compliance --trust (names under 'What it contains'). Then start a new Grok session, or press r in /plugins, to load it.

Is Claude Skills Governance Risk And Compliance an official Grok Build plugin?

No. Claude Skills Governance Risk And Compliance is a community plugin on GitHub by Sushegaad, not in xAI's official Grok Build marketplace. We checked that it installs and what Grok loads from it, but haven't run it in a live Grok session or reviewed its code.

What does Claude Skills Governance Risk And Compliance include?

According to what Grok loaded in our install check, Claude Skills Governance Risk And Compliance includes 3 skills, 36 plugins in this marketplaces: iso27001, soc2, fedramp, iso27001, soc2, fedramp….

Details

Type
Plugin
Category
Security
Source
Community Claude Code plugin, installs in Grok
License
MIT
Author
Sushegaad
Keywords
claude-ai, claude-skills, compliance, csrd, data-privacy, dpdpa-2023, eu-ai-act, fedramp, gdpr, governance, grc, hipaa
Source repo
https://github.com/Sushegaad/Claude-Skills-Governance-Risk-and-Compliance
Checked commit
aab13e1eb1db
Homepage
https://sushegaad.github.io/Claude-Skills-Governance-Risk-and-Compliance/
Checked by GrokStacks
Install-checked in Grok Build on Oct 18, 2026; not run in a live session

Something wrong or missing? Submit or improve this listing. Marketplace listings also refresh automatically every night.

For maintainers: badge and embeds

Maintain Claude Skills Governance Risk And Compliance? Add the badge; it links to this page.

Listed on GrokStacks

Markdown

[![Listed on GrokStacks](https://grokstacks.com/badge.svg)](https://grokstacks.com/p/claude-skills-governance-risk-and-compliance/)

HTML

<a href="https://grokstacks.com/p/claude-skills-governance-risk-and-compliance/"><img src="https://grokstacks.com/badge.svg" alt="Listed on GrokStacks" width="164" height="28"></a>

Embed card (static HTML and inline CSS, no JavaScript). Preview:

Claude Skills Governance Risk And ComplianceCommunity plugin for Grok Build · 3 skills, 36 plugins in this marketplacesClaude Skills for Governance, Risk, & Compliance (GRC): Expert-level compliance guidance for ISO 27001, SOC 2…View on GrokStacks →
<a href="https://grokstacks.com/p/claude-skills-governance-risk-and-compliance/" style="display:block;max-width:380px;box-sizing:border-box;padding:14px 16px;border:1px solid #2a2e3c;border-radius:12px;background:#0a0b0f;color:#e8eaf0;font:14px/1.45 -apple-system,Segoe UI,Roboto,Helvetica,Arial,sans-serif;text-decoration:none"><span style="display:block;font-size:16px;font-weight:700;color:#e8eaf0">Claude Skills Governance Risk And Compliance</span><span style="display:block;margin:2px 0 8px;font-size:12px;color:#9aa0b1">Community plugin for Grok Build · 3 skills, 36 plugins in this marketplaces</span><span style="display:block;margin:0 0 10px;color:#c9cdd8">Claude Skills for Governance, Risk, &amp; Compliance (GRC): Expert-level compliance guidance for ISO 27001, SOC 2…</span><span style="font-size:12px;font-weight:600;color:#7c9cff">View on GrokStacks →</span></a>

Markdown summary

**[Claude Skills Governance Risk And Compliance on GrokStacks](https://grokstacks.com/p/claude-skills-governance-risk-and-compliance/)**: Community plugin for Grok Build with 3 skills, 36 plugins in this marketplaces. Install: `grok plugin install iso27001@Sushegaad/Claude-Skills-Governance-Risk-and-Compliance --trust` (after `grok plugin marketplace add Sushegaad/Claude-Skills-Governance-Risk-and-Compliance`)

More on badges, embeds and keeping your listing up to date: GrokStacks for plugin authors.

Also in Security

Aaron Marketing Skills

120 marketing skills as an AI marketing staff — plugin, portable skills, or an 8-bot team across 7 disciplines (narrative, SEO/GEO, social, email, paid, influencer, launch) on one contract, with 8 auditor gates: TALE · CORE-EEAT · CITE · ECHO · SEND · ROAS · STAR · RAMP.

Community Claude Code plugin, installs in GrokPluginSecurity

Adrian

Open-source runtime AI agent security tool - monitors and controls AI agents, catching malicious tool use, prompt injection, and policy drift in real time, before the agent acts.

Community Claude Code plugin, installs in GrokPluginSecurity

Agent Beacon

The cross-harness, self-improving memory layer for AI agents. Join our community: https://discord.com/invite/zdNChS2fBu

Community Claude Code plugin, installs in GrokPluginSecurity

Agent Governance Toolkit

AI Agent Governance Toolkit — Policy enforcement, zero-trust identity, execution sandboxing, and reliability engineering for autonomous AI agents. Covers 10/10 OWASP Agentic Top 10.

Community Claude Code plugin, installs in GrokPluginSecurity

Agentguard

Security guard for AI agents — blocks malicious skills, prevents data leaks, protects secrets. 24 detection rules, runtime action evaluation, trust registry.

Community Claude Code plugin, installs in GrokPluginSecurity

Android Reverse Engineering Skill

Claude Code skill to support Android app's reverse engineering

Community Claude Code plugin, installs in GrokPluginSecuritySecurity tool

All 79 security listings →