Claude Grc Plugin

GRC Knowledge Plugin

A plugin that turns your AI coding agent into a senior GRC (Governance, Risk, and Compliance) analyst. 76+ reference files covering 18 frameworks, 24 slash commands, and deep domain knowledge for federal and commercial compliance work.

Works with: Claude Code, OpenCode

What It Does

Load this plugin and Claude gains expertise in:

- 18 compliance frameworks — NIST 800-53, FedRAMP Rev5, FedRAMP 20x/CR26, DoD/DoW Impact Levels (IL2–IL6, DISA Cloud SRG), ITAR, FISMA, CMMC, SOC 2, ISO 27001, PCI DSS, HIPAA, CIS Controls, COBIT, CSA CCM, GDPR, SLSA, OSCAL, and NIST Rev 4→5 transition
- Cross-framework mapping — Map any control to any other framework through NIST 800-53 as the hub
- Document review — Feed it SSP narratives, POA&Ms, policies, CRMs and get structural quality feedback with 0-5 maturity scoring
- Operational workflows — Significant change analysis, inheritance modeling, SAR responses, compliance calendars, tabletop exercises

It cites specific control IDs, knows baseline assignments, understands assessment procedures, and speaks the language of auditors, ISSOs, and compliance engineers.

Install

From a Plugin Marketplace (Recommended)

Add the marketplace and install:

Or from the CLI:

You can install at different scopes:

From a Local Directory

Clone the repo and load directly:

Or load alongside other plugins:

Once loaded, type /grc: to see all available commands.

OpenCode

You can ask OpenCode to self-install by telling it:
Fetch and follow the instructions at https://raw.githubusercontent.com/mlunato47/claude-grc-plugin/main/.opencode/INSTALL.md

Or install manually:

Restart OpenCode. Commands are available as /grc-control-lookup, /grc-map-controls, etc.

Commands
Note: In Claude Code, commands use /grc:command-name. In…