grcskills
Menu

Open GRC skills for AI agents.

Written the way experienced GRC people do the work. Your agent does the legwork. You make the calls.

Agent Skills for Claude Code, Codex, Cursor and any agent that reads SKILL.md.

The prompt

Read grcskills.com/llms.txt, then run the grc-setup-review skill on my GRC setup: rank the 10 skills that would help me most, list what is broken or missing, and write a 30-day plan.
Open source, MIT licensed. Nothing to sign up for.
Browse the skills

What comes back

  • A ranked shortlist for you to judgeThe ten skills that look most useful for your setup, picked from 60 across ten kinds of GRC work.
  • What looks broken, duplicated or missing, for you to confirmRead from your repo, policy folder and the exports your agent can open.
  • A 30-day plan draft. You decide what goes in it.Written to a file. Nothing is marked done for you.
Gap and readinessISO 27001SOC 2GDPR

GRC setup review

The 10 grcskills that fit your setup, an audit of what is broken, duplicated or missing, and a 30-day plan, written to files.

Tristan RothFounder, Better ISMS (makers of ISMS Copilot). ISO 27001 Lead Auditor
npx skills add better-isms/grcskills#v2026.10.19.2 --skill grc-setup-review
MIT licensedRead the skill

Find a skill

Each skill is the steps an experienced GRC person follows for one piece of work: the quality bar, the files it writes, and where you decide.

All 60 skills

Showing 6 of 60 skills

Ten kinds of GRC work

Publish how you do the work, under your name.

Your agent interviews you, writes your method down in the library format and opens the pull request. The skill carries your name as its author.

How to contribute