---

name: interview-question-generator description: Generates focused assessor interview questions from a technology stack and maps them to compliance frameworks with practical CLI/API evidence hints. allowed-tools: Bash, Read, Glob

Interview Question Generator

Use this skill when preparing audit or assessment interview questions for a client environment. It helps avoid broad screenshot requests by producing targeted questions, expected evidence, and programmatic collection hints.

Quick Commands

Generate markdown questions:

node plugins/grc-engineer/scripts/generate-interview-questions.js "AWS IAM users" SOC2,NIST-800-53,PCI-DSS

Generate JSON for downstream tooling:

node plugins/grc-engineer/scripts/generate-interview-questions.js "GitHub branch protection" SOC2 --format=json

Limit output for a short interview block:

node plugins/grc-engineer/scripts/generate-interview-questions.js "Okta MFA" ISO27001 --limit=5

Supported Stack Hints

• AWS IAM users and groups
• AWS S3 encryption and access
• AWS CloudTrail logging
• Kubernetes RBAC
• GitHub repository controls
• Okta identity controls

If no stack-specific profile matches, the generator falls back to a generic assessment profile.

Assessment Use

• Start with the client technology stack and target frameworks.
• Review the mapped controls before sending questions to stakeholders.
• Prefer CLI/API evidence hints when they can replace manual screenshots.
• Treat generated questions as an assessor starting point, not as a full test plan.