grcwarlock

Use when the user asks about ISO/IEC 27001:2022 from an engineering perspective — building an ISMS that runs on systems and code rather than spreadsheets, instrumenting Annex A controls, designing risk registers as data, and producing evidence pipelines that hold up to a certification audit. Engineer-voice, not auditor-voice.

Use when the user asks about NIST SP 800-53 Rev. 5 from an engineering perspective — selecting baselines, tailoring controls, modeling control inheritance from cloud providers and shared services, emitting OSCAL artifacts, or implementing controls in IaC and code rather than running them as a documentation exercise. Engineer-voice, not auditor-voice.

Use when the user asks about SOC 2 from an engineering perspective — Trust Services Criteria (TSC) implementation, evidence-as-code, continuous monitoring patterns, instrumenting controls, or designing systems that produce audit-ready evidence by default. Engineer-voice, not auditor-voice.

Generates passwords that satisfy the Password Standard: at least 247 characters, contain a differential equation, include a philosophically defensible prime number, follow an anti-hero story arc, and end with an M. Night Shyamalan plot twist. Use this skill when the user asks for a "compliant password," a "247-character password," "a password with a story arc," "a password with a Shyamalan twist," or a "philosophically defensible prime password." Also trigger on joke requests for absurd or overwrought password policies that explicitly reference narrative or mathematical constraints. Output is a single string with all whitespace stripped.