G

grcskills

better-isms/grcskills · v0.0.0 · Agent Skills

by better-isms

64 open GRC skills that draft risk registers, statements of applicability, audit prep and NIST RMF documents, leaving every sign-off to the practitioner, with an optional framework lookup MCP server

InstallSourceClaim this plugin
Follow0
Trust ScoreScan pendingSecurity scanScan pendingComponentsScan pending
Protect this install with HOL Guard

Guard checks the skills and MCP servers a plugin adds on your machine and asks you before a risky action runs. The scores above are free, and no plan changes them.

Is grcskills a fit?

From the plugin's manifest and HOL's scan. Anything the plugin does not declare is shown as not declared.

Works with

  • Agent Skills
  • MCP

Before you install

Sign-in
Not declared
Declared access
Not declared
License
Not declared

Check before relying on it

  • No security result yet. See the evidence
  • The publisher has not verified ownership on HOL.
  • No license declared in the manifest.

What is grcskills?

grcskills is a published agent skills plugin for AI coding agents that works with Agent Skills and MCP, developed by better-isms and distributed through the HOL AI plugin registry. 64 open GRC skills that draft risk registers, statements of applicability, audit prep and NIST RMF documents, leaving every sign-off to the practitioner, with an optional framework lookup MCP server.

Canonical slug
better-isms/grcskills
Version
v0.0.0 · updated Oct 27, 2026

Registry snapshot

Owner verification
Not verified
Scanner
Registry pipeline
Security result
Not scanned
Digest verified
No

Trust and security

Provenance

Plugin root
.
Source repo
https://github.com/better-isms/grcskills
Source commit
Unpinned
Publisher verified
No
Owner verified
Not owner verified

Scanner CI check is still running

No action is required. This listing will update after the catalog rechecks scanner CI.

README badge check is still running

No action is required. This listing will update after the catalog rechecks the source README.

Security posture

See how the Trust Score is computed
Not scanned
Security result
N/A
Security score
0
High findings

Published advisories

None matched in GitHub security advisories, checked . This covers published advisories only, not problems nobody has reported.

GitHub security advisories are those the source repository has published.

Findings

No normalized findings were returned for this plugin.

Install guidance

Install in MCP

Connect the bundled MCP server shipped in the repository .mcp.json file.

MCP docs
  1. 1

    Clone the repository

    shell
  2. 2

    Register the server in your MCP client

    Claude Code reads a project .mcp.json file and asks you to approve its servers when you open the folder. Other clients keep their own MCP configuration, so copy the server entry from .mcp.json into that client. If this repository configures its server differently, follow the MCP setup the publisher documents.

  3. 3

    Verify the server

    Check the MCP server list in your client. The server declared in .mcp.json should report as connected. In Claude Code, run /mcp to see it.

Did setup work in MCP?

No setup reports for MCP yet. Self-reported by signed-in visitors. Copying a command is not counted, and most installs are never reported.

Attested installs: Fewer than 10 attested installs of this plugin in week 2026-W43, so no number is shown. Counted from opt-in HOL Guard install reports, once per machine and runtime, and never mixed with the answers above. How install reports work.

Loading reviews

Plugin manifest

{
  "name": "grcskills",
  "version": "0.0.0",
  "description": "64 open GRC skills that draft risk registers, statements of applicability, audit prep and NIST RMF documents, leaving every sign-off to the practitioner, with an optional framework lookup MCP server",
  "repository": "https://github.com/better-isms/grcskills",
  "homepage": "https://github.com/better-isms/grcskills",
  "interface": {
    "displayName": "grcskills",
    "developerName": "better-isms",
    "category": "Agent Skills"
  }
}

File inventory

.codex-plugin/plugin.json

plugin-manifest

grcskills — Frequently asked questions

What is grcskills?
grcskills is an AI plugin in the HOL registry. 64 open GRC skills that draft risk registers, statements of applicability, audit prep and NIST RMF documents, leaving every sign-off to the practitioner, with an optional framework lookup MCP server.
How do I install grcskills?
Install grcskills in your harness: MCP — git clone https://github.com/better-isms/grcskills. Full step-by-step guidance is on the HOL plugin page.
How do I install grcskills in MCP?
To install grcskills in MCP, start with git clone https://github.com/better-isms/grcskills. The complete step-by-step install guide for MCP is on the HOL plugin page.
Who publishes grcskills?
grcskills is published by better-isms and listed on HOL.

Install signal

HOL cannot see every install. These are separate signals from different sources, so they are not added together. Counts under each floor show as <N.

Install commands issued here
<5
HOL Guard install commands issued from this listing, last 28 days.
Opt-in install reports
<10
Machines that reported installing it through HOL Guard in week 2026-W43. Reporting is opt-in, so most installs are not counted.
HOL Guard workspaces
<5
Workspaces that approved it or include it in an approved-plugin feed, as of today.

Related plugins

Ordered by Trust Score. Listings cannot pay for these positions. Check each one fits your task before switching from grcskills.

Alternatives in Agent Skills

See all Agent Skills plugins

Reviews and similar plugins