skills.rest
andrewwint
andrewwintCOMMUNITY
Explore all skills by this author →
GitHub

security-scanner

Scan CDK stacks and GitHub workflows for security vulnerabilities and compliance gaps.

Updated Feb 4, 2026
Search Tags:#security#github actions#infrastructure as code#compliance#vulnerability scanning#cdk
One-click install
npx skills add https://github.com/andrewwint/spec-driven-ai-dev-05-devops --skill security-scanner-andrewwint
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-scanner
Source: https://github.com/andrewwint/spec-driven-ai-dev-05-devops/tree/main/code/module-7-complete/skills/security-scanner
Command: npx skills add https://github.com/andrewwint/spec-driven-ai-dev-05-devops --skill security-scanner-andrewwint

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill identifies security vulnerabilities and compliance issues within infrastructure code, preventing potential breaches and ensuring adherence to best practices.

Core Features & Use Cases

  • Security Auditing: Scans CDK stacks and GitHub workflows for common security misconfigurations.
  • Compliance Checks: Validates code against predefined security and compliance checklists.
  • Severity Assessment: Categorizes findings by severity (Critical, High, Medium, Low) to prioritize remediation.
  • Remediation Suggestions: Provides actionable advice for fixing identified issues.
  • Use Case: Before deploying new infrastructure, use this Skill to automatically scan your AWS CDK code for any hardcoded secrets or overly permissive IAM roles, ensuring a secure deployment.

Quick Start

Use the security-scanner skill to review the cdk/stacks/deployment_stack.py file for IAM policy issues.

Frequently Asked Questions about security-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan AWS CDK stacks for security vulnerabilities and overly permissive IAM roles?▼

Scanning CDK stacks for security vulnerabilities involves reviewing infrastructure code to identify IAM policy misconfigurations, encryption gaps, and network security issues. The scanner evaluates CDK stacks, categorizes findings by severity, and provides specific remediation suggestions.

What security checks should I run on GitHub Actions workflows before deploying infrastructure?▼

Running security checks on GitHub Actions workflows validates OIDC configurations, secrets management, and compliance gaps. Scanning these workflows identifies misconfigurations that could lead to potential breaches and ensures adherence to security best practices.

Can I use an infrastructure as code scanner to check for hardcoded secrets in CDK deployments?▼

Yes, an infrastructure as code scanner checks for hardcoded secrets in CDK deployments. The scanner reviews infrastructure code for secrets management issues and provides actionable advice to fix identified vulnerabilities before deployment.

How does infrastructure code compliance scanning handle severity levels and remediation?▼

Infrastructure code compliance scanning categorizes findings into Critical, High, Medium, and Low severity levels to prioritize remediation. It evaluates code against predefined security checklists and delivers actionable advice for fixing each identified issue.

Does the security scanner work without external dependencies for reviewing infrastructure code?▼

Yes, the security scanner works without external dependencies to review infrastructure code. It analyzes CDK stacks and GitHub workflows internally to detect compliance gaps, IAM issues, and network security vulnerabilities.

What is the best way to ensure AWS CDK compliance and prevent security misconfigurations?▼

The best way to ensure AWS CDK compliance is to automatically scan infrastructure code for security misconfigurations before deployment. This validates code against security checklists, identifying IAM, encryption, and logging issues with detailed remediation suggestions.

Related Skills

Explore More Software Engineering Skills→
pigfootpigfoot
5

github-actions-container-build

Build multi-architecture container images in GitHub Actions with Podman.

Community
Advanced
aws-samplesaws-samples
6

aws-security-guard

Analyze AWS operation intents and infrastructure-as-code configurations for security risks.

Official
Advanced
alxayoalxayo
17

checkov-security-scan

Detect security misconfigurations and compliance violations in Infrastructure as Code.

Community
Advanced
0x0pointer0x0pointer
13

cloud-security

Assesses AWS, Azure, and GCP infrastructure for misconfigurations, exposure, and compliance gaps.

Official
Advanced