Iac Security Review — Security skill for Claude Code
Run a full IaC security review of the current directory or specified files.
How to install Iac Security Review
Installs to ~/.claude/skills/uttej-badwane-secure-cloud-prompt-engineering-iac-security-review/SKILL.md
mkdir -p ~/.claude/skills/uttej-badwane-secure-cloud-prompt-engineering-iac-security-review && curl -fsSL https://raw.githubusercontent.com/uttej-badwane/secure-cloud-prompt-engineering/HEAD/commands/iac-security-review.md -o ~/.claude/skills/uttej-badwane-secure-cloud-prompt-engineering-iac-security-review/SKILL.md Restart Claude Code, or start a new session, for it to be picked up.
What Iac Security Review does
name: iac-security-review description: Run a full IaC security review of the current directory or specified files
Perform a comprehensive IaC security review by following the skill at `skills/iac-security-review/SKILL.md`.
Steps
**Identify scope** — scan the current directory (or files provided as arguments) for IaC files: `*.tf`, `*.tfvars`, `*.yaml`, `*.yml`, `Dockerfile*`, `docker-compose*.yml`, `kustomization.yaml`
**Run security checks** — evaluate each file against
Alternatives in Security
- Cross-Pollinate Hex MCP Servers — Diff-driven audit: find real transferable changes across hex-line-mcp, hex-ssh-mcp, hex-graph-mcp 238 ★
- Roast Repo — Deliver a brutally honest, technically sharp roast of the current repository 186 ★
- Beamer Skill — A Claude Code skill for creating, compiling, reviewing, and polishing academic Beamer LaTeX presentations 163 ★
Full documentation available on GitHub
View Source RepositoryRelated Skills
Heeler Security Review
Perform a repository security review for the current project directory, including secrets exposure risk, depen
Iac Review
Full Terraform/Ansible IaC review — plan sanity, security, state hygiene, and Checkov findings.
Self Review
Run a full self-review-and-fix loop on the current changes. Checks tests, lint, and security — fixing each iss
Smart Contract Security Review
Run security review on Scalus smart contracts at specified path
Strategy Review
Run a full strategic review — competitive positioning, 7 Powers moat assessment, strategy stack audit, and pre
Review Iac Consistency
Audit infrastructure-as-code for per-environment drift, over-permissive IAM policies, unencrypted resources, a
Related Agents
Developer Implementer
Developer implementation agent. Generates code, tests, and IaC from approved LLDs and HITL context. Only opera
Shep Clean Arch Auditor
Read-only clean architecture auditor for shep. Scans a specified directory for dependency-rule violations, mag
Mr Handler
Handle a GitLab MR for the current (or specified) branch — detect whether to create a new MR or update an exis