skills.rest
SensLiao
SensLiaoCOMMUNITY
Explore all skills by this author →
GitHub

security-platform-iac-cloud

Automate security review of IaC and cloud posture with Terraform, CloudFormation, Helm, K8s, Ansible, and Pulumi.

Updated May 28, 2026
Search Tags:#compliance#iac#security scanning#Infrastructure as Code#cloud posture
One-click install
npx skills add https://github.com/SensLiao/Claude-code-setting --skill security-platform-iac-cloud
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-platform-iac-cloud
Source: https://github.com/SensLiao/Claude-code-setting/tree/main/skills/security-platform-iac-cloud
Command: npx skills add https://github.com/SensLiao/Claude-code-setting --skill security-platform-iac-cloud

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill automates the review of Infrastructure as Code (IaC) and cloud posture for security misconfigurations, drift, exposure, and compliance deviations.

Core Features & Use Cases

  • Automated IaC Review: Scan Terraform, CloudFormation, Helm, K8s manifests, Ansible, and Pulumi for misconfigurations, drift, exposure, and compliance deviations.
  • Container Security: Route container security (Dockerfile, image, runtime) via the same skill or sub-handoffs.
  • Compliance Mapping: Maps to NIST SP 800-190, CIS Benchmarks, and ASVS V13.
  • Non-Modifying: Does NOT modify infrastructure, only reviews and reports.

Quick Start

Run the skill to review the IaC and cloud posture of the provided Terraform manifests.

Frequently Asked Questions about security-platform-iac-cloud

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate security scanning for Terraform and CloudFormation manifests?▼

Automate security scanning for Terraform and CloudFormation by running the skill to review IaC files for misconfigurations, drift, exposure, and compliance deviations. It checks your manifests against NIST SP 800-190, CIS Benchmarks, and ASVS V13.

Can I scan Kubernetes Helm charts and Ansible playbooks for compliance deviations?▼

Yes, you can scan Kubernetes Helm charts, K8s manifests, Ansible, and Pulumi configurations for compliance deviations. The skill reviews these IaC formats to detect security misconfigurations and exposure risks.

Does this security review tool modify my cloud infrastructure during scanning?▼

No, the security review tool does not modify your cloud infrastructure. It only reads and reviews your IaC files and cloud posture to report security misconfigurations and compliance deviations without applying changes.

What compliance standards are used for cloud posture and IaC security reviews?▼

Cloud posture and IaC security reviews use NIST SP 800-190, CIS Benchmarks, and ASVS V13 compliance standards. The skill maps your Terraform, Helm, and K8s configurations against these frameworks to identify deviations.

Do I need cloud credentials to scan Infrastructure as Code for security misconfigurations?▼

Yes, you need cloud credentials and access to your IaC files to scan for security misconfigurations. Providing credentials allows the skill to accurately assess your cloud posture alongside your Terraform or CloudFormation manifests.

How do I check Dockerfiles and container images for security misconfigurations?▼

Check Dockerfiles and container images for security misconfigurations by routing container security tasks through the same skill. It handles Dockerfile, image, and runtime security reviews using sub-handoffs to identify exposure risks.

Related Skills

Explore More Software Engineering Skills→
wfukatsuwfukatsu
5

design-infrastructure

Generate Kubernetes manifests and IaC configurations for multi-cloud infrastructure designs.

Community
Advanced
UnitOneAIUnitOneAI
44

container-security

Evaluate Dockerfiles and Kubernetes configurations against CIS and NIST benchmarks.

Official
Intermediate
shakhovskiya-createshakhovskiya-create

deploy-audit

Audit CI/CD pipelines and infrastructure configurations for security and reliability.

Community
Advanced
devendrapratapsinghdevendrapratapsingh
1

platform-security

Audit container images, Kubernetes configurations, cloud environments, and infrastructure as code for security vulnerabilities.

Community
Advanced