How do I install the Iac Scanner skill?

Run npx skillmds@latest add naporin0624/iac-scanner in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is Iac Scanner safe to use?

This skill has not completed SkillMD's automated safety review yet. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Iac Scanner?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Iac Scanner free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Iac Scanner?

naporin0624 (@naporin0624) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Iac Scanner by naporin0624 — Agent Skill

Name: Iac Scanner
Author: naporin0624

Iac Scanner

Scans Infrastructure as Code for security misconfigurations. Wraps tfsec for Terraform and Checkov for multi-cloud IaC. Use when user asks to "scan Terraform", "IaC security", "infrastructure scan", "tfsec", "checkov", "Terraformセキュリティ", "インフラスキャン".

naporin0624 Updated Sep 17, 2026

File contents

IaC Scanner

Wrapper for tfsec and Checkov to scan Infrastructure as Code.

Prerequisites

# tfsec (Terraform focused)
brew install tfsec
# or
go install github.com/aquasecurity/tfsec/cmd/tfsec@latest

# Checkov (multi-cloud)
pip install checkov
# or
brew install checkov

Usage

# Scan with auto-detection
npx iac-scanner .

# Force specific scanner
npx iac-scanner . --scanner tfsec
npx iac-scanner . --scanner checkov

# JSON output
npx iac-scanner . --json

# Check available scanners
npx iac-scanner --check

# Scan specific framework
npx iac-scanner . --framework terraform
npx iac-scanner . --framework kubernetes
npx iac-scanner . --framework cloudformation

Supported Frameworks

Scanner	Frameworks
tfsec	Terraform
Checkov	Terraform, CloudFormation, Kubernetes, ARM, Serverless, Helm

Output Format

{
  "tool": "tfsec",
  "scanPath": ".",
  "scanDate": "2024-01-15T10:30:00Z",
  "findings": [
    {
      "id": "aws-s3-enable-bucket-encryption",
      "severity": "high",
      "message": "Bucket does not have encryption enabled",
      "resource": "aws_s3_bucket.data",
      "file": "main.tf",
      "line": 15,
      "resolution": "Enable bucket encryption"
    }
  ],
  "summary": {
    "total": 5,
    "critical": 1,
    "high": 2,
    "medium": 1,
    "low": 1
  }
}

Common Misconfigurations

Category	Example
Encryption	S3 bucket without encryption
Access Control	Public S3 bucket, open security groups
Logging	Missing CloudTrail, no access logs
Network	VPC without flow logs, open CIDR
IAM	Overly permissive policies, wildcard actions
Secrets	Hardcoded credentials in config

Exit Codes

0: No issues found
1: Issues detected
2: Tool not installed or error

---name: iac-scannerdescription: Scans Infrastructure as Code for security misconfigurations. Wraps tfsec for Terraform and Checkov for multi-cloud IaC. Use when user asks to "scan Terraform", "IaC security", "infrastructure scan", "tfsec", "checkov", "Terraformセキュリティ", "インフラスキャン".---# IaC ScannerWrapper for tfsec and Checkov to scan Infrastructure as Code.## Prerequisites```bash# tfsec (Terraform focused)brew install tfsec# orgo install github.com/aquasecurity/tfsec/cmd/tfsec@latest# Checkov (multi-cloud)pip install checkov# orbrew install checkov```## Usage```bash# Scan with auto-detectionnpx iac-scanner .# Force specific scannernpx iac-scanner . --scanner tfsecnpx iac-scanner . --scanner checkov# JSON outputnpx iac-scanner . --json# Check available scannersnpx iac-scanner --check# Scan specific frameworknpx iac-scanner . --framework terraformnpx iac-scanner . --framework kubernetesnpx iac-scanner . --framework cloudformation```## Supported Frameworks| Scanner | Frameworks ||---------|------------|| tfsec | Terraform || Checkov | Terraform, CloudFormation, Kubernetes, ARM, Serverless, Helm |## Output Format```json{ "tool": "tfsec", "scanPath": ".", "scanDate": "2024-01-15T10:30:00Z", "findings": [ { "id": "aws-s3-enable-bucket-encryption", "severity": "high", "message": "Bucket does not have encryption enabled", "resource": "aws_s3_bucket.data", "file": "main.tf", "line": 15, "resolution": "Enable bucket encryption" } ], "summary": { "total": 5, "critical": 1, "high": 2, "medium": 1, "low": 1 }}```## Common Misconfigurations| Category | Example ||----------|---------|| Encryption | S3 bucket without encryption || Access Control | Public S3 bucket, open security groups || Logging | Missing CloudTrail, no access logs || Network | VPC without flow logs, open CIDR || IAM | Overly permissive policies, wildcard actions || Secrets | Hardcoded credentials in config |## Exit Codes- `0`: No issues found- `1`: Issues detected- `2`: Tool not installed or error

Frequently asked questions