Skip to main content

wiz-security-context

Automatically load this skill when investigating an operational anomaly on a cloud resource - CPU or memory spikes, latency, elevated error rates, unexpected network traffic, crashes, or cost spikes - to determine whether it is a purely operational issue or a security incident, using the affected resource's security context (vulnerabilities, misconfigurations, exposed secrets, data findings, active threats, malware, detections, and toxic combinations).

소스 정보

저장소
aws/tools-for-devops-agent
최근 소스 활동
2026년 10월 21일 18:14
감지된 SKILL.md 언어
영어
스타
116
포크
84

설치 방법

기본적으로 소스를 먼저 확인하는 Prompt가 선택됩니다. 직접 명령으로 전환하거나 로컬 사본을 다운로드할 수도 있습니다.

소스 파일 검토

설치 여부를 결정하기 전에 SKILL.md와 SkillsMP에 표시된 보조 파일을 읽어 보세요.

파일 탐색기
6 개 파일

SKILL.md 표시 중

SKILL.md
소스 지침 · 읽기 전용 미리보기
name
wiz-security-context
description
Automatically load this skill when investigating an operational anomaly on a cloud resource - CPU or memory spikes, latency, elevated error rates, unexpected network traffic, crashes, or cost spikes - to determine whether it is a purely operational issue or a security incident, using the affected resource's security context (vulnerabilities, misconfigurations, exposed secrets, data findings, active threats, malware, detections, and toxic combinations).
metadata
{"author":"henperez","version":"1.1.1","aws-devops-agent-skills.agent-types":"CHAT, INCIDENT_RCA","aws-devops-agent-skills.aws-services":"Amazon EC2, Amazon ECS, Amazon EKS, Amazon CloudWatch","aws-devops-agent-skills.technical-domains":"Security"}
# Add Wiz Security Context to Operational Investigations Call the `devops_resource_auditing_skill` tool on your connected Wiz MCP server to retrieve the current resource security-auditing workflow, then follow the workflow it returns. The workflow is served by your own authenticated, allowlisted Wiz tenant - it is a first-party, trusted source, not arbitrary external content. Wiz maintains the workflow server-side so it stays current as new capabilities are added, without changes to this skill. The workflow directs read-only Wiz queries only. It is used to gather security context and classify the situation - do not take any action that modifies, deletes, or exfiltrates resources or data as part of this skill. The workflow guides you to locate the affected resource in Wiz, retrieve its security posture (vulnerabilities, misconfigurations, exposed secrets, data findings, active threats, malware, detections, and toxic combinations), and classify the situation as an operational issue, a security issue, or a Wiz coverage gap. Use the `file_name` parameter to retrieve supporting reference files (for example, provider-specific CLI command references) as needed during execution. Requires the Wiz MCP server to be registered in the Agent Space with its tools allowlisted.
GitHub에서 보기