One prompt. Your setup, reviewed.

Open GRC skills for AI agents. Paste the prompt into your agent; it runs 60 practitioner skills against your files and writes a 30-day plan.

The prompt

Clone https://github.com/better-isms/grcskills and read every SKILL.md. Then run the grc-setup-review skill on this workspace: rank the 10 skills that fit my GRC setup, list what looks broken, duplicated or missing, and write a 30-day plan to a file.
Open source, MIT licensed. Nothing to sign up for.
Browse the skills

What comes back

  • The ten skills that fit your setup, rankedPicked from 60 skills across ten kinds of GRC work.
  • What looks broken, duplicated or missingRead from your repo, policy folder and the exports your agent can open.
  • A 30-day plan, written to a fileDrafts for you to review. Nothing is marked done for you.
Gap and readinessISO 27001SOC 2GDPR

GRC setup review

Use this skill when someone wants to know where to start with the grcskills library, or asks "review my GRC setup", "what should I fix before the audit", "which compliance skills do I need", "audit…

Tristan RothFounder, Better ISMS (makers of ISMS Copilot). ISO 27001 Lead Auditor
npx skills add better-isms/grcskills --skill grc-setup-review
MIT licensedRead the skill

Find a skill

Each skill is one job a practitioner does, with the steps, the quality bar and the files it writes.

All 60 skills

Ten kinds of GRC work

Know a job well? Write it down with your AI.

Your agent interviews you, drafts the skill in the library format and opens the pull request. You are credited as the author.

How to contribute