Infrastructure Security Review
Audits Infrastructure-as-Code (IaC) for security vulnerabilities and compliance gaps using specialized patterns and checklists.
This skill empowers Claude to perform comprehensive security audits on Terraform and OpenTofu configurations, identifying critical risks such as hardcoded secrets, unencrypted state files, and overly permissive network rules. By leveraging domain-specific grep patterns and structured checklists, it helps developers ensure their cloud infrastructure meets security best practices and compliance standards like SOC 2, HIPAA, and PCI-DSS before deployment. It streamlines the review process by providing standardized report templates and clear remediation guidance for found vulnerabilities.
Características Principales
01Network exposure checks for open SSH ports and wide CIDR ranges
0218 GitHub stars
03Automated detection of hardcoded AWS keys, passwords, and API credentials
04Validation of state backend encryption and bucket access policies
05Compute and database hardening verification including VPC attachments
06Standardized security report generation with severity-based categorization
Casos de Uso
01Pre-deployment security auditing of Terraform and OpenTofu codebases
02Compliance readiness checks for SOC 2, HIPAA, or PCI-DSS infrastructure
03Rapid identification and remediation of exposed secrets in cloud configurations