# grcwarlock

> Open-source publisher. Listings imported from github.com/grcwarlock — credited to the original author with their license.

- **Listings:** 4
- **Total installs:** 0
- **Profile:** https://agentstack.voostack.com/s/grcwarlock
- **Website:** https://github.com/grcwarlock

## Published listings

- [Iso 27001](https://agentstack.voostack.com/l/skill-grcwarlock-compliance-as-code-iso-27001) — Skill · Free · security-reviewed — `agentstack add skill-grcwarlock-compliance-as-code-iso-27001`
  Use when the user asks about ISO/IEC 27001:2022 from an engineering perspective — building an ISMS that runs on systems and code rather than spreadsheets, instrumenting Annex A controls, designing risk registers as data, and producing evidence pipelines that hold up to a certification audit. Engineer-voice, not auditor-voice.
- [Soc 2](https://agentstack.voostack.com/l/skill-grcwarlock-compliance-as-code-soc-2) — Skill · Free · security-reviewed — `agentstack add skill-grcwarlock-compliance-as-code-soc-2`
  Use when the user asks about SOC 2 from an engineering perspective — Trust Services Criteria (TSC) implementation, evidence-as-code, continuous monitoring patterns, instrumenting controls, or designing systems that produce audit-ready evidence by default. Engineer-voice, not auditor-voice.
- [Password Standard](https://agentstack.voostack.com/l/skill-grcwarlock-password-standard-password-standard) — Skill · Free · security-reviewed — `agentstack add skill-grcwarlock-password-standard-password-standard`
  >
- [Nist 800 53](https://agentstack.voostack.com/l/skill-grcwarlock-compliance-as-code-nist-800-53) — Skill · Free · security-reviewed — `agentstack add skill-grcwarlock-compliance-as-code-nist-800-53`
  Use when the user asks about NIST SP 800-53 Rev. 5 from an engineering perspective — selecting baselines, tailoring controls, modeling control inheritance from cloud providers and shared services, emitting OSCAL artifacts, or implementing controls in IaC and code rather than running them as a documentation exercise. Engineer-voice, not auditor-voice.

---
Seller on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Install any with `agentstack add <slug>`.