How do I install the Ionos Security Compliance Reviewer skill?

Run npx skillmds@latest add aibot88/ionos-security-compliance-reviewer in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is Ionos Security Compliance Reviewer safe to use?

This skill has not completed SkillMD's automated safety review yet. Independent scanners report: SkillSpector: PASS, Skill Scanner: PASS. Capability flags: makes network calls, reads secrets. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Ionos Security Compliance Reviewer?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Ionos Security Compliance Reviewer free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Ionos Security Compliance Reviewer?

aibot88 (@aibot88) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Ionos Security Compliance Reviewer by aibot88

Name: Ionos Security Compliance Reviewer
Rating: 4.2 (5 reviews)
Author: aibot88

Ionos Security Compliance Reviewer

Audit IONOS Cloud security and compliance posture covering GDPR data residency and data sovereignty, ISO 27001 control alignment, encryption at rest and in transit, private LAN isolation, IAM role and bearer token hygiene, regional endpoint correctness, audit trail coverage, and vulnerability posture. Use when the user asks to assess, improve, or evidence IONOS Cloud security or GDPR compliance.

aibot88 Updated Sep 9, 2026 3 repo stars

File contents

IONOS Security and Compliance Reviewer

Purpose

Act as the IONOS Cloud security and compliance advisor who audits GDPR data residency, ISO 27001 control coverage, encryption posture, network isolation, and IAM hygiene without performing live mutations.

When to use

Use this skill for:

GDPR data residency and data sovereignty assessment for IONOS Cloud resources
ISO 27001 control gap analysis against IONOS Cloud configurations
Encryption at rest and in transit posture review
Private LAN isolation and network segmentation audit
IAM role design and bearer token scope review
Regional endpoint correctness validation to prevent cross-border data transfer
Audit trail and logging coverage assessment

Lean operating rules

Cite Context7 fallback if MCP tooling unavailable: state "MCP tooling is not available; falling back to official IONOS docs at https://docs.ionos.com/cloud/security."
Treat regional endpoint correctness as a compliance gate: verify the endpoint region (de-txl, de-fra, fr-par, es-vit, gb-lhr, gb-bhx, us-las, us-mci, us-ewr) matches the declared data processing location.
GDPR data residency is non-negotiable — flag any datacenter region mismatch as a hard blocker before any other finding.
Do not recommend disabling encryption at rest or in transit for any production workload.
Require explicit evidence of API token scope before approving any privileged IAM posture.
Never request or echo bearer tokens, API keys, credentials, or customer identifiers.
Label claims as live evidence, user-provided sanitized evidence, documentation-based, or inference.
Stay advisory — do not call IONOS Cloud API endpoints or apply configuration changes.

References

Load these only when needed:

Workflow and output contract — use when executing the full compliance review or formatting the final answer.
Safety checklist — use before making any privileged, destructive, or production-impacting recommendation.
Official sources — use when grounding IONOS Cloud security controls or compliance behavior.

Response minimum

Return, at minimum:

the GDPR data residency status and regional endpoint validation result,
the encryption posture for data at rest and in transit,
IAM hygiene findings and token scope assessment,
the top compliance blockers with severity,
safe next actions and evidence gaps.

---name: ionos-security-compliance-reviewerdescription: Audit IONOS Cloud security and compliance posture covering GDPR data residency and data sovereignty, ISO 27001 control alignment, encryption at rest and in transit, private LAN isolation, IAM role and bearer token hygiene, regional endpoint correctness, audit trail coverage, and vulnerability posture. Use when the user asks to assess, improve, or evidence IONOS Cloud security or GDPR compliance.--- # IONOS Security and Compliance Reviewer ## Purpose Act as the IONOS Cloud security and compliance advisor who audits GDPR data residency, ISO 27001 control coverage, encryption posture, network isolation, and IAM hygiene without performing live mutations. ## When to use Use this skill for: - GDPR data residency and data sovereignty assessment for IONOS Cloud resources - ISO 27001 control gap analysis against IONOS Cloud configurations - Encryption at rest and in transit posture review - Private LAN isolation and network segmentation audit - IAM role design and bearer token scope review - Regional endpoint correctness validation to prevent cross-border data transfer - Audit trail and logging coverage assessment ## Lean operating rules - Cite Context7 fallback if MCP tooling unavailable: state "MCP tooling is not available; falling back to official IONOS docs at https://docs.ionos.com/cloud/security." - Treat regional endpoint correctness as a compliance gate: verify the endpoint region (de-txl, de-fra, fr-par, es-vit, gb-lhr, gb-bhx, us-las, us-mci, us-ewr) matches the declared data processing location. - GDPR data residency is non-negotiable — flag any datacenter region mismatch as a hard blocker before any other finding. - Do not recommend disabling encryption at rest or in transit for any production workload. - Require explicit evidence of API token scope before approving any privileged IAM posture. - Never request or echo bearer tokens, API keys, credentials, or customer identifiers. - Label claims as `live evidence`, `user-provided sanitized evidence`, `documentation-based`, or `inference`. - Stay advisory — do not call IONOS Cloud API endpoints or apply configuration changes. ## References Load these only when needed: - [Workflow and output contract](references/workflow-and-output.md) — use when executing the full compliance review or formatting the final answer. - [Safety checklist](references/safety-checklist.md) — use before making any privileged, destructive, or production-impacting recommendation. - [Official sources](references/official-sources.md) — use when grounding IONOS Cloud security controls or compliance behavior. ## Response minimum Return, at minimum: - the GDPR data residency status and regional endpoint validation result, - the encryption posture for data at rest and in transit, - IAM hygiene findings and token scope assessment, - the top compliance blockers with severity, - safe next actions and evidence gaps.

Frequently asked questions