AWS Container Isolation — Security agent for Claude Code
Determine which running ECS tasks cross the boundary to the host that runs them, what the container instance behind each one reaches, and which EKS clusters carry no cluster security group.
How to install AWS Container Isolation
Installs to ~/.claude/agents/mvanhorn-cynative-aws-container-isolation.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/mvanhorn/cynative/HEAD/agents/aws-container-isolation.md -o ~/.claude/agents/mvanhorn-cynative-aws-container-isolation.md Restart Claude Code, or start a new session, for it to be picked up.
What AWS Container Isolation does
description: Determine which running ECS tasks cross the boundary to the host that runs them, what the container instance behind each one reaches, and which EKS clusters carry no cluster security group.
Research which ECS task definitions actually running in this account cross the boundary to the host that runs them, and which EKS clusters carry no cluster security group.
Take the revisions to read from the running services and tasks themselves, each of which records the revision it ru
Alternatives in Security
- Gitnexus Security Boundary Reviewer — GitNexus security and trust-boundary reviewer 45.8k ★
- Omarchy Submission Auditor — Audit an Omarchy plugin before it reaches the marketplace: prove it installs and runs on a stock box (no node/ 2.7k ★
- Offensive Security Engineer — Red-team the verification engine 179 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Audit Cluster
Maps topic clusters, detects keyword cannibalization via SERP overlap, validates hub-spoke internal linking, i
Cdk Security Reviewer
Use this agent when the user has written AWS CDK infrastructure code and needs a security review. This include
Cloud Security
Delegates to this agent when the user asks about cloud security testing, AWS/Azure/GCP penetration testing, cl
Sa Agent
AWS Solutions Architect teammate — architecture review, cost/security recommendations, Well-Architected assess
Supervisor Audit
EM Supervisor — audit mode review agent. Invoked by Stop-hook block at stage boundaries (CONFIRM_INTENT/OUTLIN
Electron Architect
Use this agent for Electron main process work, IPC handler design, preload bridge changes, window management,
Related Skills
Cluster Triage Skill
Ordered read-only diagnostic sweep of the MacMountain EKS clusters (customer360-prod, macmtn-dev-cluster) when
Karpenter
Design, install, debug, review, plan capacity, audit scaling history, migrate from Cluster Autoscaler, and upg
Clusters Create
Create a new Kafka cluster in Confluent Cloud
