skills.rest
prowler-cloud
prowler-cloudOFFICIAL
Explore all skills by this author →
Website𝕏@ProwlerCloudGitHub

framework-compliance-triage

Remediates cloud account findings until compliance with a chosen security framework is achieved.

14.7k|2.4k|Updated Aug 24, 2016
Search Tags:#remediation#terraform#cloud security#scanning#prowler#CIS#Compliance
One-click install
npx skills add https://github.com/prowler-cloud/prowler --skill framework-compliance-triage
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: framework-compliance-triage
Source: https://github.com/prowler-cloud/prowler/tree/main/claude_plugins/prowler/skills/framework-compliance-triage
Command: npx skills add https://github.com/prowler-cloud/prowler --skill framework-compliance-triage

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Cloud accounts often fail dozens of security framework requirements, and manually triaging findings, applying fixes, and re-verifying compliance is slow and error-prone. This Skill drives an iterative loop through Prowler Cloud that takes an account from failing scan results to a passing compliance posture.

Core Features & Use Cases

  • Guided setup and scanning: Connects to Prowler Cloud, verifies provider configuration, and ensures a completed scan with a compliance report exists before starting remediation.
  • Persistent compliance report: Maintains a per-account, per-framework markdown report tracking requirement statuses ([FAIL], [IN PROGRESS], [FIXED-UNVERIFIED], [PASS], [SKIPPED]) with an append-only activity log.
  • Interactive remediation loop: Pulls remediation guidance from Prowler Hub for each failing finding, applies fixes via Terraform, cloud CLIs, or console in assisted or autonomous mode, and triggers rescans to verify.
  • Use Case: A security engineer asks to make an AWS account compliant with CIS. The Skill scans the account, generates a compliance report, walks through each failing requirement with checkpoint approvals, applies fixes, and rescans until the framework passes.

Quick Start

Make my AWS account compliant with the CIS framework using Terraform in assisted mode.

Frequently Asked Questions about framework-compliance-triage

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I make my AWS account compliant with CIS using Prowler?▼

Connect Prowler Cloud, select the AWS provider and CIS framework, and ensure a completed scan exists. The Skill then generates a compliance report, walks through each failing requirement with remediation guidance, applies fixes, and rescans to verify.

What remediation tools does Prowler compliance triage support?▼

Fixes can be applied with Terraform, AWS CLI, Azure CLI, GitHub CLI, or the provider web console. You choose the tool and operating mode (assisted or autonomous) at the global remediation approach checkpoint before any changes are made.

What is the difference between assisted and autonomous remediation mode?▼

Assisted mode requires confirmation before each requirement fix, showing the resource, commands, side effects, and reversibility. Autonomous mode applies fixes after a single batch-plan approval, pausing only for findings with wide blast radius or unclear applicability.

Does the compliance report persist between sessions?▼

Yes, the report is stored as a markdown file at .prowler/compliance-<compliance_id>-<provider_uid>.md in the project directory. It tracks requirement statuses, fix plans, and an append-only activity log across remediation sessions.

What happens if a finding does not apply to my account?▼

Findings that are not applicable, such as Organization-only checks on a User account or paid-tier features, are marked [SKIPPED] with the reason recorded in the activity log. No fix is attempted for skipped items.

Related Skills

Explore More Software Engineering Skills→
0x0pointer0x0pointer
13

cloud-security

Assesses AWS, Azure, and GCP infrastructure for misconfigurations, exposure, and compliance gaps.

Official
Advanced
aurainfosecaurainfosec

prowler

Run Prowler AWS security scans and validate FAIL findings with AWS CLI evidence.

Official
Advanced
Eigo-Mt-FujiEigo-Mt-Fuji

security-auditor

Audit code, infrastructure, and dependencies for OWASP-aligned security risks.

Community
Advanced
altrupetsaltrupets

Security & Compliance Automation

Automate security and compliance checks for cloud-native environments using OPA, Trivy, and CIS benchmarks.

Official
Advanced