sammyboi81

Cloud Iac Security — Security skill for Claude Code

Security community

Cloud and infrastructure-as-code hardening - IAM, network, storage, metadata, drift, posture scanning.

How to install Cloud Iac Security

Installs to ~/.claude/skills/sammyboi81-bulwark-mcp-cloud-iac-security/SKILL.md

Terminal
mkdir -p ~/.claude/skills/sammyboi81-bulwark-mcp-cloud-iac-security && curl -fsSL https://raw.githubusercontent.com/sammyboi81/bulwark-mcp/HEAD/skills/cloud-iac-security.md -o ~/.claude/skills/sammyboi81-bulwark-mcp-cloud-iac-security/SKILL.md

Restart Claude Code, or start a new session, for it to be picked up.

What Cloud Iac Security does


name: cloud-iac-security description: Cloud and infrastructure-as-code hardening - IAM, network, storage, metadata, drift, posture scanning. tags: cloud, infra

  • Identity first: no root/owner for daily use; MFA (phishing-resistant) on all humans; SSO; workload identity instead of static keys; least-privilege roles; no *:*; permission boundaries/SCPs; break-glass accounts monitored.
  • Network: default-deny security groups; private subnets for data stores; no public SSH/RDP/DB ports; egr

Alternatives in Security

  • Anthropic Cybersecurity Skills — 734+ structured cybersecurity skills for AI agents · MITRE ATT&CK mapped · agentskills.io open standard · Work 3.8k ★
  • Mcp-scan (Invariant Labs) — MCP security scanner with proxy mode for real-time scanning without infrastructure changes 1.9k ★
  • MCP Security Checklist (SlowMist) — Comprehensive checklist: input validation, rate limiting, RBAC, credential management, container hardening 819 ★

Full documentation available on GitHub

View Source Repository