warden-recon

Inventory security posture across secrets, IAM, dependencies, authentication, encryption, and audit logging.

69|8|Updated Mar 16, 2026

Search Tags:#security #reconnaissance #compliance #secrets #iam #audit-logging

Ready to run

npx skills add https://github.com/tonone-ai/tonone --skill warden-recon

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: warden-recon
Source: https://github.com/tonone-ai/tonone/tree/main/team/warden/skills/warden-recon
Command: npx skills add https://github.com/tonone-ai/tonone --skill warden-recon

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Security teams can inventory and evaluate the complete security posture across secrets management, IAM controls, dependencies, authentication, encryption, and audit logging to identify gaps and risk.

Core Features & Use Cases

Inventory secrets management and IAM access controls to quantify who can access what and how credentials are stored.
Assess dependencies and audit logs to surface supply-chain risks, misconfigurations, and compliance gaps across environments.
Use cases include security posture reviews, compliance readiness checks (SOC2, GDPR, HIPAA), and architecture validation for secure-by-default design.

Quick Start

Inventory security posture across secrets management, IAM, dependencies, authentication, encryption, and audit logging.

Frequently Asked Questions about warden-recon

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I inventory my security posture across IAM and secrets management?▼

Assess secrets management and IAM access controls to quantify who can access what and how credentials are stored across environments. This security posture inventory identifies gaps in authentication and encryption controls.

What is the best way to prepare for a SOC2 or HIPAA compliance readiness check?▼

The best way to prepare for compliance readiness checks like SOC2, GDPR, or HIPAA is to evaluate dependencies and audit logs to surface supply-chain risks, misconfigurations, and compliance gaps across cloud and on-premises environments.

Can I use IaC and configuration files to map remediation priorities for security risks?▼

Yes, you can use IaC, configs, and logs to detect security risks and map remediation priorities. The assessment outputs a risk matrix detailing specific remediation steps for identified vulnerabilities across your infrastructure.

Does this security assessment work for both cloud stacks and on-premises environments?▼

Yes, this security assessment applies to architecture validations across both cloud stacks and on-premises environments. It evaluates authentication, encryption, and audit logging to ensure secure-by-default design regardless of infrastructure type.

How does evaluating audit logs and dependencies surface supply-chain risks?▼

Evaluating audit logs and dependencies surfaces supply-chain risks by identifying misconfigurations and compliance gaps within your environments. This process detects unauthorized access patterns and vulnerable components across your infrastructure.