Iac Security Review · uttej-badwane bundle Performs comprehensive security reviews of Infrastructure as Code (IaC) files including Terraform, Kubernetes manifests, Dockerfiles, CloudFormation, Ansible playbooks, Helm charts, and CI/CD pipelines. Checks against CIS benchmarks, NIST 800-53, PCI-DSS, SOC2, HIPAA, and GDPR controls. Use this skill whenever the user asks to review IaC for security issues, audit cloud infrastructure code, check Terraform or Kubernetes for misconfigurations, scan Dockerfiles for vulnerabilities, review CI/CD pipeline security, or perform compliance checks on infrastructure code. Also triggers when the user mentions "security review", "IaC audit", "hardening", "misconfiguration", "compliance check", "secret management", "supply chain security", or "secure my infrastructure code". Covers CIS, NIST 800-53, NIST 800-171, PCI-DSS, SOC2, HIPAA, and GDPR.
