skill-security-review

Automate infrastructure security audits by feeding changed Terraform files, target hosts, intent, and exposure context into a review workflow that identifies secret exposure, misconfigurations, and least-privilege violations before deployment.

Checking for secret exposure before merging requires a pre-commit or pre-deploy audit that scrutinizes changes touching secrets, services, and hosts to catch risky exposures and policy violations early in the workflow.

You can perform compliance and risk assessments on service configurations before deployment by applying a deterministic audit that checks for access control issues, misconfigurations, and unintentional public exposure across environments.

To run an automated security review, you need to provide the changed files, target hosts, deployment intent, and public exposure context to perform a thorough assessment of risk and compliance.

This security audit approach works for both application and infrastructure changes, applying role-based scrutiny to updates touching secrets, services, Terraform configurations, and host definitions across environments.