What problem does it solve? Infrastructure-as-code repositories accumulate security risks like hardcoded secrets, privileged containers, and missing authentication middleware that are easy to miss during manual review. This Skill systematically audits your homelab codebase against project-specific security standards and produces calibrated, evidence-backed findings. ## Core Features & Use Cases - Secret Exposure Detection: Scans Ansible vars, templates, and inventory files for plaintext credentials, unencrypted SOPS files, and hardcoded passwords in Jinja2 templates. - Configuration Hardening Review: Flags privileged containers, host network modes, overly broad volume mounts, missing TLS, and services bypassing Authelia forward-auth. - False-Positive Filtering: Requires each finding to cite specific file:line evidence, checks git history before flagging, and states exploit preconditions in a Bounds line to keep severity honest. - Use Case: Before deploying changes to a k3s homelab, run a review to catch a new IngressRoute missing the Authelia middleware or a secret accidentally committed to group_vars. ## Quick Start Run a security review of the repository and report any exposed credentials or missing authentication middleware with severity ratings.
