What security tools does the infra-tester skill use?

The skill integrates with industry-standard tools like Checkov and tfsec to identify vulnerabilities, misconfigurations, and compliance issues in your infrastructure code.

Where does the skill store its test results?

Test reports are generated in JSON format and stored within the .fractary/plugins/faber-cloud/test-reports directory, organized by environment and timestamp.

Can this skill prevent expensive cloud bill surprises?

Yes, it includes a cost estimation phase that analyzes your Terraform configurations and fails the test if the estimated cost exceeds your predefined thresholds.

Is this skill specific to a certain cloud provider?

No, it is designed to work with Terraform (IaC), meaning it can validate configurations for AWS, Azure, Google Cloud, and other providers supported by Terraform providers.

Does it support post-deployment verification?

Absolutely. The skill has a specific post-deployment phase designed to verify that resources are healthy and integration tests pass once the infrastructure is live.

Infrastructure Testing & Security

Name: Infrastructure Testing & Security
Author: fractary

$fractary$ byfractary

•

セキュリティとテスト

Validates infrastructure configurations and deployments through automated security scanning, cost analysis, and post-deployment verification.

The Infrastructure Testing skill (infra-tester) provides a comprehensive suite for validating Infrastructure as Code (IaC) directly within Claude. It automates critical pre-deployment checks, including security scanning with Checkov and tfsec and predictive cost estimation to prevent budget overruns. Post-deployment, it performs resource verification and integration testing to ensure environmental health. By generating detailed reports and tracking historical trends, it enables a fail-fast approach to cloud management, ensuring all deployments meet security, compliance, and budget requirements before they go live.

主な機能

01Automated security scanning using Checkov and tfsec for IaC

02Pre-deployment validation and post-deployment resource verification

032 GitHub stars

04Predictive infrastructure cost estimation to prevent budget surprises

05Comprehensive test reports with categorized severity findings

06Historical test tracking for trend analysis and compliance auditing

ユースケース

01Analyzing the financial impact of infrastructure changes before committing code

02Running mandatory security audits on Terraform code before production deployment

03Verifying cloud resource health and connectivity after an automated CI/CD run

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add fractary/claude-plugins infra-tester

For use in Claude.ai and ChatGPT

Download Skill