skills.rest
physics91
physics91COMMUNITY
Explore all skills by this author →
GitHub

infra-security-reviewer

Identify security gaps in Terraform, Pulumi, Kubernetes, and AWS/GCP/Azure configurations.

Updated Aug 23, 2026
Search Tags:#compliance#rbac#iam#network-policy#secrets-management
One-click install
npx skills add https://github.com/physics91/claude-vibe --skill infra-security-reviewer
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: infra-security-reviewer
Source: https://github.com/physics91/claude-vibe/tree/main/skills/infra-security-reviewer
Command: npx skills add https://github.com/physics91/claude-vibe --skill infra-security-reviewer

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill audits infrastructure configurations for secrets, network policies, IAM/RBAC, and compliance, helping teams harden cloud setups.

Core Features & Use Cases

  • Secrets management checks and rotation guidance
  • Network policy and firewall rules assessment
  • IAM/RBAC least-privilege recommendations
  • Compliance validation (SOC2/HIPAA/PCI)
  • Use Case: Review Terraform/K8s configs to surface hardcoded secrets and overly permissive access.

Quick Start

Run the infra-security-reviewer on IaC and cloud configs to generate a remediation checklist.

Frequently Asked Questions about infra-security-reviewer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I identify hardcoded secrets in my Terraform and Kubernetes configurations?▼

Infrastructure security audits scan IaC and K8s configs to detect hardcoded secrets, API keys, and credentials embedded in resource definitions. This Skill surfaces these findings so you can move secrets to external vaults and rotate compromised values.

What should I check in my IAM and RBAC policies to enforce least privilege?▼

Least-privilege IAM audits review access policies across AWS, GCP, and Azure to eliminate overly broad permissions. This Skill identifies roles granting unnecessary actions and recommends scoped policies aligned to job functions.

Can I validate Kubernetes NetworkPolicy and firewall rules for compliance?▼

Yes. This Skill audits network policies and firewall configurations to verify segmentation, evaluate rule coverage, and check alignment with SOC2, HIPAA, and PCI compliance frameworks.

How do I audit cloud security configurations across multiple providers?▼

Cloud security audits apply consistent checks to AWS, GCP, and Azure infrastructure. This Skill reviews secrets management, network policies, IAM settings, and compliance posture in a single pass across your multi-cloud environment.

What compliance gaps should I look for in my infrastructure setup?▼

Compliance validation checks for audit logging enablement, MFA enforcement, secret rotation schedules, and network flow logs. This Skill generates a remediation checklist addressing SOC2, HIPAA, and PCI requirements.

Does this work with both Terraform and Pulumi configurations?▼

Yes. Infrastructure security review applies to Terraform and Pulumi IaC configurations, identifying misconfigurations and security gaps in both declarative code formats.

Related Skills

Explore More Software Engineering Skills→
wfukatsuwfukatsu
5

design-infrastructure

Generate Kubernetes manifests and IaC configurations for multi-cloud infrastructure designs.

Community
Advanced
Community-AccessCommunity-Access
387

report-generation

Generate document accessibility audit reports with severity scores and VPAT/ACR compliance exports.

Official
Intermediate
mtsatryanmtsatryan
1

security-engineer

Automates infrastructure security engineering across cloud, container, and DevSecOps environments.

Community
Advanced
devendrapratapsinghdevendrapratapsingh
1

platform-security

Audit container images, Kubernetes configurations, cloud environments, and infrastructure as code for security vulnerabilities.

Community
Advanced