skills.rest
msaad00
msaad00COMMUNITY
Explore all skills by this author →
GitHub

agent-bom-scan-infra

Scan Terraform, CloudFormation, Kubernetes YAML, and Dockerfiles for secrets and misconfigurations.

29|7|Updated Feb 22, 2026
Search Tags:#kubernetes#secrets#terraform#iac#cloud-security#misconfigurations
One-click install
npx skills add https://github.com/msaad00/agent-bom --skill agent-bom-scan-infra
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: agent-bom-scan-infra
Source: https://github.com/msaad00/agent-bom/tree/main/integrations/openclaw/scan-infra
Command: npx skills add https://github.com/msaad00/agent-bom --skill agent-bom-scan-infra

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Infrastructure teams struggle to secure infrastructure-as-code and cloud configurations, risking secrets leakage and misconfigurations.

Core Features & Use Cases

  • Scans Terraform, CloudFormation, Kubernetes YAML, and Dockerfiles for misconfigurations and secrets.
  • Runs cloud CIS benchmarks (AWS, Azure, GCP, Snowflake) using locally configured credentials.
  • Provides actionable remediation guidance and secure-by-default recommendations.

Quick Start

Run agent-bom iac infra/ to scan Terraform, CloudFormation, and Kubernetes configurations for misconfigurations and secrets.

Frequently Asked Questions about agent-bom-scan-infra

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan Terraform and Kubernetes YAML for secrets and misconfigurations?▼

To scan Terraform and Kubernetes YAML for secrets and misconfigurations, run the tool against your infrastructure directory to identify vulnerabilities and receive actionable remediation guidance.

Can I run cloud CIS benchmarks for AWS and Azure using locally configured credentials?▼

Yes, you can run cloud CIS benchmarks for AWS, Azure, GCP, and Snowflake using locally configured credentials, ensuring all checks run locally by default with no data leaving your host.

What's the best way to detect hardcoded secrets in Dockerfiles and CloudFormation templates?▼

The best way to detect hardcoded secrets in Dockerfiles and CloudFormation templates is scanning your infrastructure-as-code files locally, which identifies vulnerabilities and provides secure-by-default recommendations.

Does this infrastructure-as-code scanner require cloud API access to check for misconfigurations?▼

No, this infrastructure-as-code scanner does not require cloud API access by default. All checks run locally, with explicit cloud API calls occurring only when you opt in and provide credentials.

Related Skills

Explore More Software Engineering Skills→
louloulinlouloulin
19

cloud-infrastructure

Design and govern multi-cloud infrastructure across AWS, Azure, and GCP with IaC tooling.

Community
Advanced
Hashzin-0Hashzin-0

mcp-security-validator

Validate MCP code and server configurations for security vulnerabilities.

Community
Advanced
VXerysVXerys

devops-engineer

Automate CI/CD pipeline setup, configuration, and maintenance with Docker, Kubernetes, and Terraform.

Community
Advanced
Muath2000Muath2000

cspm-engineer

Build a multi-cloud CSPM engine assessing assets against CIS benchmarks.

Community
Advanced