setup-cloak

name	setup-cloak
description	Set up CLOAK development environment. Use when the user wants to install, configure, or troubleshoot CLOAK setup.

CLOAK Setup

Guide users through CLOAK environment setup.

Verification

Run verification to check current status:

poetry run python .claude/skills/setup-cloak/scripts/verify_setup.py

The script outputs JSON with status of each component. Use this to determine which steps are needed.

Note: Always use poetry run python to ensure the script runs in the Poetry virtual environment with all dependencies available.

Requirements

• Python 3.11+
• Poetry (package manager)
• AWS credentials with read permissions

Setup Workflow

Step 1: Python

Verify Python 3.11+ is installed. If not, user must install Python first.

Step 2: Poetry

Install Poetry if not available. Use pipx (recommended) or the official installer.

Step 3: Dependencies

poetry install

Step 4: AWS Credentials

Configure AWS credentials using any standard method (environment variables, ~/.aws/credentials, SSO, or IAM role).

Required permissions: See docs/SETUP.md for the complete IAM policy.

Step 5: Validate

poetry run python -m cloak.cli --validate-connection

Step 6: Final Verification

Run the verification script again to confirm all components are ready.

Success Criteria

Setup is complete when verify_setup.py shows "ready": true.

Troubleshooting

See docs/TROUBLESHOOTING.md for common issues.

Next Steps

Setup is complete! Here are some things you can try:

S3 Storage Security

• "Enumerate all S3 buckets in my account and check for public access"
• "Review bucket policies for overly permissive configurations"

IAM Identity Assessment

• "List all IAM users and show me which ones have console access"
• "Check IAM roles for excessive permissions"

EC2 Network Security

• "Find security groups with unrestricted inbound access (0.0.0.0/0)"
• "Review my VPC configurations"

Lambda Function Security

• "Enumerate Lambda functions and their resource-based policies"

Or invoke a skill directly for guided assessments: /aws-s3, /aws-iam, /aws-ec2, /aws-lambda