Results for “iac-audit”
13 skills
antigravity aegisops-ai
Orchestrates Gemini 3 Flash to audit Linux Kernel patches for memory safety, detect cost drifts in Terraform plans, and generate hardened Kubernetes security contexts.
42.4k
snoodleboot-io infrastructure-drift-detection
Detect and triage infrastructure drift by comparing declared Terraform state against live cloud resources using scheduled pipelines and audit logs.
2
More results
huuanh20 ck-quality
Audits code quality against a shared contract, producing structured findings and blocking pipeline phases on critical issues without modifying code.
1 · bundle
dangquangse ck-quality
Audits code quality against a shared contract, returning structured findings without modifying code. Supports gate, audit, diff, changed, and verify modes.
19 · bundle
github acreadiness-assess
Run an AI-readiness assessment on the current repository and generate a static HTML dashboard at reports/index.html.
36.2k · bundle
trailofbits agentic-actions-auditor
Audits GitHub Actions workflows for security vulnerabilities in AI agent integrations, detecting attack vectors where attacker-controlled input reaches AI agents in CI/CD pipelines.
6k · bundle
mukul975 auditing-gcp-iam-permissions
Audits Google Cloud Platform IAM permissions to identify overly permissive bindings, primitive role usage, service account key proliferation, and cross-project access risks using gcloud CLI, Policy Analyzer, and IAM Recommender.
24.6k · bundle
machenjie ci-cd
`analysis-agent`/`task-agent`/`review-agent`: use when CI/CD checks, artifacts, deployment gates, IaC, or Helm behavior changes; skip when pipelines are unaffected.
4 · bundle
kensaurus audit-cicd
Audit CI/CD pipelines (GitHub Actions) for cost, speed, and safety. Use when the Actions bill is high, Actions minutes, runner cost, slow CI, artifact/cache storage, or "CI/CD / workflow audit". Gate logic (bypass, ratchet gaming, required-but-not) → audit-gate-logic.
8
iac-misconfig-scan
Scan infrastructure-as-code — Dockerfiles, Compose, Terraform, and GitHub Actions — for security misconfigurations like running as root, world-writable files, unpinned actions, and hardcoded secrets. Pure Claude Code, no signup.
tinh2 owasp
Systematically audits a web application against the OWASP 2021 Top 10, producing severity-rated, file-level findings with fixes for each category.
13
mukul975 auditing-terraform-infrastructure-for-security
Audit Terraform infrastructure-as-code for security misconfigurations using Checkov, tfsec, Terrascan, and OPA/Rego policies to detect overly permissive IAM policies, public resource exposure, missing encryption, and insecure defaults before cloud deployment.
24.6k · bundle
tinh2 devops
Audits deployment readiness across CI/CD, containers, monitoring, IaC, secrets, CDN, and DNS, scoring each area and identifying critical gaps, with optional auto-fix via chained sub-skills.
13