Infrastructure Security Auditor
Audits infrastructure configs for security best practices. Prerequisites: docker, trivy, curl.
MCP get_skill({ skillId: "infrastructure-security-auditor-1379487c" })Use this skill with your agent
Create a free account and connect via MCP
# Infrastructure Security Auditor ## Description Audit infrastructure configuration files for security vulnerabilities and compliance. ## Supported Formats - Terraform (.tf) - Docker Compose / Dockerfile - Kubernetes manifests - AWS CloudFormation - GitHub Actions workflows ## Checks 1. **Secrets**: Hardcoded credentials, API keys, passwords 2. **Network**: Open ports, public access, missing firewalls 3. **IAM**: Overly permissive roles, missing MFA 4. **Encryption**: Data at rest, data in transit 5. **Logging**: Audit trails, monitoring gaps 6. **Compliance**: CIS benchmarks, SOC2 controls ## Output Security report with severity ratings and remediation steps.
Related Skills
More skills in DevOps
Explore Other Categories
Skills from other categories with shared topics
Growth
Optimizing SEO (meta/OGP/JSON-LD/heading hierarchy), SMO (social sharing), CRO (CTA/form/exit-intent), and GEO (AI citation optimization) across four pillars. Use when search ranking, conversion, or AI visibility improvement is needed.
Scaffold
Provisioning infrastructure via cloud IaC (Terraform/OpenTofu/CloudFormation/Pulumi) and local development environments (Docker Compose/dev setup/env vars). Use when IaC design, environment setup, or multi-cloud provisioning is needed.
Accord
Authoring unified specification packages across Business/Development/Design teams via staged elaboration (L0 Vision → L1 Requirements → L2 Team Detail → L3 Acceptance Criteria). No code. Use when authoring cross-team specs, building L0-L3 packages, or aligning Biz/Dev/Design on a single source of truth.