Which file types can this skill analyze?

It can analyze various configuration formats including Infrastructure-as-Code files like Terraform (.tf) and CloudFormation, as well as application files like .yml, .json, and .env.

Can I use this for cloud security audits?

Yes, it is specifically designed to check cloud resource configurations for common risks like publicly accessible storage buckets or insecure network security groups.

Does it automatically fix the security issues it finds?

It identifies vulnerabilities and provides specific remediation advice. You can then direct Claude to implement the suggested changes to your configuration files.

How does it help with compliance?

The skill checks your settings against security best practices and predefined rules to ensure your infrastructure and application configurations meet industry standards.

Security Misconfiguration Finder

Name: Security Misconfiguration Finder
Author: intent-solutions-io

byintent-solutions-io

セキュリティとテスト

Identifies potential security vulnerabilities and compliance issues within infrastructure-as-code and application configuration files.

概要

This skill empowers Claude to proactively detect security misconfigurations by analyzing system settings, Infrastructure-as-Code (IaC) files like Terraform or CloudFormation, and application configurations. By leveraging the security-misconfiguration-finder plugin, it helps developers identify insecure defaults, exposed credentials, and network vulnerabilities early in the development lifecycle, providing clear remediation steps to harden systems and ensure compliance with security best practices.

主な機能

Checks network settings for overly permissive access controls
Detects exposed API keys and sensitive credentials
Scans application configuration files for insecure defaults
0 GitHub stars
Analyzes Infrastructure-as-Code for deployment vulnerabilities
Provides actionable remediation recommendations for identified risks

ユースケース

Scanning application properties and environment variables for hardcoded secrets
Auditing Terraform or CloudFormation files before cloud deployment
Performing security assessments on system configuration files for compliance

概要

主な機能

Checks network settings for overly permissive access controls
Detects exposed API keys and sensitive credentials
Scans application configuration files for insecure defaults
0 GitHub stars
Analyzes Infrastructure-as-Code for deployment vulnerabilities
Provides actionable remediation recommendations for identified risks

ユースケース

Scanning application properties and environment variables for hardcoded secrets
Auditing Terraform or CloudFormation files before cloud deployment
Performing security assessments on system configuration files for compliance