What problem does it solve? Manually verifying a self-hosted CockroachDB cluster against the CIS CockroachDB Benchmark is slow and error-prone, requiring dozens of shell and SQL checks across every node. This Skill automates the assessment of all 30 Level 1 controls and produces a structured PASS/FAIL/MANUAL compliance report. ## Core Features & Use Cases - Two Audit Depths: Run a quick scan with one-liner shell/SQL checks per control, or a full audit following the official multi-step CIS procedures for evidence collection. - Six Security Domains: Covers installation and patches, system hardening and topology, logging and monitoring, user access and authorization, data protection, and CockroachDB settings. - Structured Compliance Report: Generates a markdown report with PASS/FAIL/MANUAL/N/A findings, CIS Controls v7/v8 mappings, and a severity-ordered remediation summary. - Use Case: Before a SOC 2 or PCI DSS audit, run the quick scan across all cluster nodes to identify failing controls like disabled auth logging or missing HBA rules, then run the full audit on failures to gather evidence for auditors. ## Quick Start Audit my self-hosted CockroachDB cluster against the CIS Benchmark and generate a compliance report.
