orca-skills
Cloud security alert triage, investigation, and remediation
All Skills in This Repository (11)
Pure Emerald Level Indicators
orcasecurityorca-asset-profile
Generate a 360° security profile for cloud assets by name, ID, or ARN.
orcasecurityorca-investigate
Trace actor activity from cloud audit logs into session timelines with MITRE ATT&CK mappings.
orcasecurityorca-data-exposure
Discover and prioritize sensitive data exposure across environments.
orcasecurityorca-compliance-gap
Analyze and rank compliance gaps across frameworks by account and asset.
orcasecurityorca-identity-review
Identify overprivileged AWS cloud identities by comparing granted permissions with CloudTrail usage.
orcasecurityorca-exposure-map
Map external attack surface with exposure vectors and risk rankings.
orcasecurityorca-config-origin
Traces Orca alerts to their origin via metadata, code origins, and audit logs.
orcasecurityorca-cloud-cost-optimizer
Analyze Orca MCP asset data and live pricing to identify cloud cost optimization opportunities.
orcasecurityorca-impact-analysis
Model remediation impact for Orca alerts across environments.
orcasecurityorca-alert-triage
Convert Orca Security alerts into triage summaries with timelines and risk assessments.
orcasecurityorca-morning-briefing
Compile critical alerts, attack path changes, and compliance drift into a daily security briefing.
Frequently Asked Questions
FAQPage SchemaHow to install Orca Skills?▼
Run `npx skills add orcasecurity/orca-skills --all -g -y` in your terminal to install all skills globally. Then configure the Orca Security MCP server in your .mcp.json file so the skills can access your environment data.
What does Orca Skills do?▼
It connects your coding assistant to the Orca Security platform to triage alerts, investigate incidents, map attack surface exposure, review identity permissions, and check compliance gaps. Each skill answers a specific security operations question using live cloud data.
Do I need an Orca Security account?▼
Yes. These skills query your cloud environment through the Orca Security MCP server, so you need an active Orca account and an API token or OAuth2 login.
Can it generate fixes for security findings?▼
Yes. Most skills offer remediation output in Terraform, CloudFormation, Ansible, Pulumi, ARM/Bicep, CLI commands, or step-by-step console instructions, written directly to a file.
Which cloud providers are supported?▼
The skills cover AWS, Azure, and GCP, with some identity cleanup capabilities extending to Alibaba Cloud, OCI, and Tencent Cloud.
Related Repositories in Software Engineering
View All in Software Engineering→
openclawopenclaw
Run a personal AI assistant across your devices and chat apps
obrasuperpowers
Gives coding agents a disciplined workflow from idea to merged code
facebookreact
AI agent skills for building, testing, and porting React core