Manage cloud security posture, compliance scanning, and security settings across cloud environments using Trend Micro Vision One. This skill includes both read and write operations for posture management.
Instructions
When the user asks about cloud posture, compliance, or cloud security configuration, use this skill to query and manage posture data.
Check posture status: Start with get_cloud_posture_overview to understand the current compliance and posture state.
List compliance findings: Use list_cloud_posture_findings to identify misconfigurations and compliance violations.
Review templates: Use list_cloud_posture_templates to see available compliance templates and standards.
Before write operations: Always confirm with the user before executing any write operations (scan triggers, settings updates).
Trigger scans: Use trigger_cloud_posture_scan to initiate compliance scans when requested by the user.
Update settings: Use update_cloud_posture_settings to modify posture configurations with user approval.
Track remediation: Help users track which findings have been addressed and which remain open.
Tools
This skill uses the following Vision One MCP tools:
CSPM Accounts
Tool
Purpose
Type
cloud_posture_accounts_list
List all CSPM accounts
Read
Compliance Checks
Tool
Purpose
Type
cloud_posture_account_checks_list
List compliance checks for an account
Read
Scan Management
Tool
Purpose
Type
cloud_posture_account_scan
Start scanning a cloud posture account
Write
cloud_posture_account_scan_settings_get
Get scan settings for an account
Read
cloud_posture_account_scan_settings_update
Update scan settings (enabled/interval)
Write
Template Scanner
Tool
Purpose
Type
cloud_posture_template_scanner_run
Scan IaC templates (CloudFormation/Terraform)
Write
Cloud Risk Management
Tool
Purpose
Type
cloud_risk_management_accounts_list
List cloud accounts you can access
Read
cloud_risk_management_account_scan_rules_get
Get scan rule settings for an account
Read
cloud_risk_management_services_list
List cloud services and associated rules
Read
Common Workflows
Compliance Assessment
Get posture overview for current state
List findings grouped by severity
Identify critical misconfigurations
Map findings to compliance frameworks
Prioritize remediation activities
Compliance Scan Request
List available templates to identify scan scope
Confirm with user before triggering scan
Trigger cloud posture scan
Monitor scan progress
Review new findings after completion
Posture Configuration Update
Review current settings
Discuss proposed changes with user
Get explicit user approval for changes
Apply settings update
Verify changes were applied successfully
Remediation Tracking
List findings filtered by status
Identify findings marked for remediation
Check if remediated findings have been rescanned
Report on remediation progress
Highlight remaining open items
Infrastructure as Code Scanning
Receive CloudFormation or Terraform template content
## Action Required: [Operation Type]
**Operation**: [Description of what will be changed]
**Scope**: [What resources/settings will be affected]
### Current State
[Current configuration]
### Proposed Change
[What will change]
**Do you want to proceed with this operation? (yes/no)**
Security Considerations
Write operations require explicit user confirmation before execution
Document all configuration changes for audit purposes
Critical findings should be addressed promptly
Coordinate posture changes with cloud operations teams
Test settings changes in non-production environments first when possible
1---2name: cloud-posture3description: Cloud Posture4---5# Cloud Posture67Manage cloud security posture, compliance scanning, and security settings across cloud environments using Trend Micro Vision One. This skill includes both read and write operations for posture management.89## Instructions10111. When the user asks about cloud posture, compliance, or cloud security configuration, use this skill to query and manage posture data.12132. **Check posture status**: Start with `get_cloud_posture_overview` to understand the current compliance and posture state.14153. **List compliance findings**: Use `list_cloud_posture_findings` to identify misconfigurations and compliance violations.16174. **Review templates**: Use `list_cloud_posture_templates` to see available compliance templates and standards.18195. **Before write operations**: Always confirm with the user before executing any write operations (scan triggers, settings updates).20216. **Trigger scans**: Use `trigger_cloud_posture_scan` to initiate compliance scans when requested by the user.22237. **Update settings**: Use `update_cloud_posture_settings` to modify posture configurations with user approval.24258. **Track remediation**: Help users track which findings have been addressed and which remain open.2627## Tools2829This skill uses the following Vision One MCP tools:3031### CSPM Accounts32| Tool | Purpose | Type |33|------|---------|------|34| `cloud_posture_accounts_list` | List all CSPM accounts | Read |3536### Compliance Checks37| Tool | Purpose | Type |38|------|---------|------|39| `cloud_posture_account_checks_list` | List compliance checks for an account | Read |4041### Scan Management42| Tool | Purpose | Type |43|------|---------|------|44| `cloud_posture_account_scan` | Start scanning a cloud posture account | Write |45| `cloud_posture_account_scan_settings_get` | Get scan settings for an account | Read |46| `cloud_posture_account_scan_settings_update` | Update scan settings (enabled/interval) | Write |4748### Template Scanner49| Tool | Purpose | Type |50|------|---------|------|51| `cloud_posture_template_scanner_run` | Scan IaC templates (CloudFormation/Terraform) | Write |5253### Cloud Risk Management54| Tool | Purpose | Type |55|------|---------|------|56| `cloud_risk_management_accounts_list` | List cloud accounts you can access | Read |57| `cloud_risk_management_account_scan_rules_get` | Get scan rule settings for an account | Read |58| `cloud_risk_management_services_list` | List cloud services and associated rules | Read |5960## Common Workflows6162### Compliance Assessment631. Get posture overview for current state642. List findings grouped by severity653. Identify critical misconfigurations664. Map findings to compliance frameworks675. Prioritize remediation activities6869### Compliance Scan Request701. List available templates to identify scan scope712. **Confirm with user** before triggering scan723. Trigger cloud posture scan734. Monitor scan progress745. Review new findings after completion7576### Posture Configuration Update771. Review current settings782. Discuss proposed changes with user793. **Get explicit user approval** for changes804. Apply settings update815. Verify changes were applied successfully8283### Remediation Tracking841. List findings filtered by status852. Identify findings marked for remediation863. Check if remediated findings have been rescanned874. Report on remediation progress885. Highlight remaining open items8990### Infrastructure as Code Scanning911. Receive CloudFormation or Terraform template content922. **Confirm with user** before scanning933. Run template scanner944. Review findings for misconfigurations955. Report security issues before deployment966. Recommend remediations for template issues9798### Scan Rule Configuration991. List cloud risk management accounts1002. Get scan rule settings for specific account1013. Review customized rules vs. defaults1024. List available services and rules1035. Document rule configuration for compliance104105## Output Format106107### Posture Overview108```109## Cloud Posture Summary110111**Overall Compliance**: [%]112**Last Scan**: [Timestamp]113114### Findings by Severity115- Critical: [count]116- High: [count]117- Medium: [count]118- Low: [count]119120### Compliance by Framework121| Framework | Score | Pass | Fail |122|-----------|-------|------|------|123| CIS | [%] | [count] | [count] |124| SOC 2 | [%] | [count] | [count] |125| PCI DSS | [%] | [count] | [count] |126```127128### Compliance Finding129```130## Finding: [Title]131132**Severity**: [Critical/High/Medium/Low]133**Framework**: [CIS/SOC 2/etc.]134**Rule ID**: [ID]135136### Description137[Finding description]138139### Affected Resources140- [Resource type]: [Resource ID]141142### Remediation143[Steps to remediate]144145### Compliance Impact146- [Framework]: [Control ID]147```148149### Write Operation Confirmation150```151## Action Required: [Operation Type]152153**Operation**: [Description of what will be changed]154**Scope**: [What resources/settings will be affected]155156### Current State157[Current configuration]158159### Proposed Change160[What will change]161162**Do you want to proceed with this operation? (yes/no)**163```164165## Security Considerations166167- **Write operations require explicit user confirmation** before execution168- Scan triggers may impact cloud API rate limits169- Settings changes affect security policy enforcement170- Document all configuration changes for audit purposes171- Critical findings should be addressed promptly172- Coordinate posture changes with cloud operations teams173- Test settings changes in non-production environments first when possible
Run npx skillmds@latest add trendmicro/cloud-posture in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.
Cloud Posture It is listed under DevOps & Infra on SkillMD.
This skill has not completed SkillMD's automated safety review yet. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.
This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.
Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.
trendmicro (@trendmicro) published this skill. Their other Agent Skills are listed on their SkillMD profile.
trendmicro