transilienceaiOfficial·23 Agent Skills Included

shasta

Unified cloud, AI, SOC, and compliance security monitoring

Scans AWS, Azure, GCP, and Entra environments for security findings and maps them to frameworks like NIST AI RMF, ISO 42001, SOC 2, and PCI automatically. Discovers AI workloads, audits Vertex AI and Gemini usage, and detects risky AI code in connected repositories. Replaces fragmented security tools with one findings model, one identity graph, and one compliance crosswalk.

145|28

↗

npx skills add transilienceai/shasta --all -g -y

All Skills in This Repository (23)

Pure Emerald Level Indicators

📦 In Repo

transilienceai

hipaa

Map cloud findings to HIPAA safeguards and generate remediation-ready reports.

connect-aws

Connect Shasta to an AWS account and validate credentials.

vendor-risk

Scan a vendor domain and report risk score, grade, signals, and findings.

evidence

Collect and store point-in-time compliance evidence snapshots for audit trails.

sbom

Generate an SBOM from AWS environments and scan for vulnerable packages.

risk-register

Automate SOC 2 risk register creation and maintenance from scan findings.

iso27001

Identify gaps between AWS environments and ISO 27001:2022 Annex A controls.

review-access

Compile AWS IAM user permissions and activity for quarterly SOC 2 access reviews.

pentest

Automate security assessments of AWS and Azure cloud environments.

scan

Scan AWS and Azure accounts for SOC 2 compliance gaps and generate Markdown and HTML reports.

questionnaire

Convert Shasta scan data and policy documents into security questionnaire responses.

dashboard

Launch the Shasta dashboard in a browser to monitor cloud compliance posture.

Official

Intermediate

Frequently Asked Questions

FAQPage Schema

How to install Shasta?▼

Run `npx skills add transilienceai/shasta --all -g -y` in your terminal to install all skills in this suite globally.

What does Shasta scan for?▼

It scans AWS, Azure, GCP, and Entra for misconfigurations, exploitable CVEs, identity risks, and AI workload exposure, tagging every finding across 8 compliance frameworks.

How does Shasta handle AI security?▼

It discovers AI workloads like Bedrock, SageMaker, and Vertex AI, audits Gemini Workspace activity, and scans connected GitHub repos for risky AI code patterns such as exposed secrets and MCP servers.

Which compliance frameworks does Shasta support?▼

Findings are automatically mapped to NIST AI RMF, ISO 42001, EU AI Act, SOC 2, ISO 27001, PCI DSS, FedRAMP, and CIS Benchmarks with per-finding provenance for auditors.

Can non-engineers use Shasta?▼

Yes. Findings are accessible through a web console, chat interface, voice queries, and an iOS app, so security and compliance teams can review posture without writing code.