Use `wiz-inspector` when Wiz CNAPP is the source of cloud posture, vulnerability, toxic-combination, or inventory evidence. Inputs: - `WIZ_CLIENT_ID` - `WIZ_CLIENT_SECRET` - `WIZ_API_URL`, for example `https://api.<region>.app.wiz.io/graphql` - optional `WIZ_AUTH_URL`, defaulting to `https://auth.app.wiz.io/oauth/token` - optional `WIZ_PROJECT_ID` to constrain collection to a Wiz project - required read-only scopes: `read:projects`, `read:issues`, `read:vulnerabilities`, `read:inventory` Run ...
Scanned 5/28/2026
Install to Claude Code
Skills Directorynpx -y skills add GRCEngClub/claude-grc-engineering --skill wiz-inspector-expert --agent claude-codeInstalls into .claude/skills of the current project.
Are you the author of Wiz Inspector Expert?
Add the live security badge to your README — it updates automatically with every re-scan.
[](https://www.skillsdirectory.com/skills/grcengclub-wiz-inspector-expert)More formats (shields.io, HTML) on the badges page.
# Wiz Inspector Expert
Use `wiz-inspector` when Wiz CNAPP is the source of cloud posture, vulnerability, toxic-combination, or inventory evidence.
Inputs:
- `WIZ_CLIENT_ID`
- `WIZ_CLIENT_SECRET`
- `WIZ_API_URL`, for example `https://api.<region>.app.wiz.io/graphql`
- optional `WIZ_AUTH_URL`, defaulting to `https://auth.app.wiz.io/oauth/token`
- optional `WIZ_PROJECT_ID` to constrain collection to a Wiz project
- required read-only scopes: `read:projects`, `read:issues`, `read:vulnerabilities`, `read:inventory`
Run `/wiz-inspector:setup`, then `/wiz-inspector:collect`. Findings are emitted using `schemas/finding.schema.json` and can feed GRC Engineering gap assessments, OSCAL exports, workpaper generation, and remediation workflows.
The collector handles cursor pagination, project scoping, Wiz severity/status normalization, and partial results. If a GraphQL resource query fails, it emits an `inconclusive` Finding for that endpoint and continues collecting the remaining resource types.
Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.
No comments yet. Be the first to comment!
Use this skill when adding authentication, handling user input, working with secrets, creating API endpoints, or implementing payment/sensitive features. Provides comprehensive security checklist and patterns.
