Setup Cloak

CLOAK Setup

Guide users through CLOAK environment setup.

Verification

Run verification to check current status:

poetry run python .claude/skills/setup-cloak/scripts/verify_setup.py

The script outputs JSON with status of each component. Use this to determine which steps are needed.

Note: Always use poetry run python to ensure the script runs in the Poetry virtual environment with all dependencies available.

Requirements

• Python 3.11+
• Poetry (package manager)
• AWS credentials with read permissions

Setup Workflow

Step 1: Python

Verify Python 3.11+ is installed. If not, user must install Python first.

Step 2: Poetry

Install Poetry if not available. Use pipx (recommended) or the official installer.

Step 3: Dependencies

poetry install

Step 4: AWS Credentials

Configure AWS credentials using any standard method (environment variables, ~/.aws/credentials, SSO, or IAM role).

Required permissions: See docs/SETUP.md for the complete IAM policy.

Step 5: Validate

poetry run python -m cloak.cli --validate-connection

Step 6: Final Verification

Run the verification script again to confirm all components are ready.

Success Criteria

Setup is complete when verify_setup.py shows "ready": true.

Troubleshooting

See docs/TROUBLESHOOTING.md for common issues.

Next Steps

Setup is complete! Here are some things you can try:

S3 Storage Security

• "Enumerate all S3 buckets in my account and check for public access"
• "Review bucket policies for overly permissive configurations"

IAM Identity Assessment

• "List all IAM users and show me which ones have console access"
• "Check IAM roles for excessive permissions"

EC2 Network Security

• "Find security groups with unrestricted inbound access (0.0.0.0/0)"
• "Review my VPC configurations"

Lambda Function Security

• "Enumerate Lambda functions and their resource-based policies"

Or invoke a skill directly for guided assessments: /aws-s3, /aws-iam, /aws-ec2, /aws-lambda