cloud-security-automation

Cloud security posture skill for AWS, Azure, GCP, and multi-cloud. Covers IAM least-privilege, key and secret hygiene, network exposure, data protection, logging coverage, IaC scanning (Terraform, CloudFormation, Bicep, Pulumi), CSPM remediation, and landing-zone hardening. Use for misconfig discovery, IaC review, and automated drift-and-fix workflows on cloud accounts you own.

跳到安装

仓库: Masriyan/gemini-security-skills
最近来源活动: 2026年5月21日 06:53
检测到的 SKILL.md 语言: 英语
星标: 3
分支: 0

安装方式

默认使用会先检查来源的 Prompt；你也可以切换为直接命令，或下载本地副本。

用 Codex 或 Claude 帮你安装复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。

直接命令不会经过审查 Prompt；运行前请先检查来源。

npx skills add https://github.com/Masriyan/gemini-security-skills --skill cloud-security-automation

命令会保持在同一行。复制前请横向滚动并检查完整内容。

想先保存到本地？可下载 SkillsMP 当前能够提供的文件。

检查来源文件

决定是否安装前，请先阅读 SKILL.md，以及 SkillsMP 当前展示的配套文件。

文件资源管理器

2 个文件

SKILL.md

来源说明 · 只读预览

返回搜索返回安装

Cloud Security Automation

Authorization Boundary

Require account IDs, role ARNs/principals, and read-only credentials in scope before any live query.

Default to read-only APIs and --dry-run/plan mode for any change.

Do not exfiltrate customer data; redact resource names if shared outside the engagement.

Posture Workflow

Inventory: accounts, subscriptions, projects, regions, services in use, owners, tags.

Baseline: pull config via aws configservice, az resource graph, gcloud asset, plus prowler, scout-suite, cloudsploit, steampipe.

Score: map findings to CIS, NIST 800-53, Well-Architected, and CSA CCM.

IaC pre-flight: checkov, tfsec, kics, terrascan, cfn-nag on PRs; block on critical.

Remediate: produce least-privilege IAM diffs, network restrictions, encryption defaults, and logging fixes as code, not console clicks.

Drift watch: compare desired state to live; alert on out-of-band changes.

Focus Areas

IAM: wildcard actions, cross-account trust, unused roles, long-lived keys, OIDC federation.

Network: public S3/Blob/GCS, 0.0.0.0/0 ingress, exposed databases, lateral paths.

Data: encryption at rest, KMS key policies, backup posture, PII tagging.

Logging: CloudTrail/Activity Logs/Audit Logs coverage, retention, SIEM ingestion.

Identity: MFA, conditional access, SCP/Org Policy guardrails, break-glass accounts.

Output Contract

inventory.json, findings.csv (with severity, control, evidence, fix).

iac-patches/: ready-to-PR diffs.

runbooks/: incident-grade response for each top finding.

posture-trend.md: weekly delta with regressions called out.

name	cloud-security-automation
description	Cloud security posture skill for AWS, Azure, GCP, and multi-cloud. Covers IAM least-privilege, key and secret hygiene, network exposure, data protection, logging coverage, IaC scanning (Terraform, CloudFormation, Bicep, Pulumi), CSPM remediation, and landing-zone hardening. Use for misconfig discovery, IaC review, and automated drift-and-fix workflows on cloud accounts you own.