Cloud Security AI Skills

Cloud Security Posture Review

Performs a comprehensive cloud security posture review against CIS benchmarks for AWS, GCP, or Azure. Checks identity, networking, logging, encryption, and compute configurations, then produces a scored findings report with prioritized remediation steps in a Google Sheet.

Data Classification Scanner

Scans GitHub repositories, S3 buckets, and Google Drive for personally identifiable information (PII), protected health information (PHI), financial data, and other sensitive content. Classifies findings by data type and sensitivity level, maps data flows, and generates a comprehensive data classification report with remediation recommendations.

IAM Policy Analyzer

Reviews IAM policies across cloud providers to identify over-permissive access, unused roles, cross-account trust issues, and privilege escalation paths. Generates a risk-scored findings report with specific remediation recommendations for each policy violation.

MCP Server Security Review

Performs a structured security audit of an MCP server by reviewing its source code for credential handling, data exposure risks, permission scope, transport security, code quality, and documentation. Scores each dimension, checks for common vulnerabilities (hardcoded secrets, eval injection, path traversal), and produces a review report with an approve/conditional/reject recommendation.

Network Security Group Auditor

Audits AWS Security Groups, NACLs, and firewall rules for overly permissive configurations. Identifies rules allowing unrestricted ingress (0.0.0.0/0), unnecessary open ports, unused security groups, and public-facing resources that should be private. Generates a prioritized remediation report with specific rule changes.

Security Alert Triage

Automatically triages security alerts from AWS GuardDuty, CloudTrail, and other cloud security services. Classifies each alert by severity and type, correlates related events, filters false positives, suggests response actions, and routes critical alerts to the appropriate team via Slack and PagerDuty.

Shadow AI Discovery

Scans your GitHub repositories, Slack workspace, and SSO logs to detect unauthorized AI tool usage. Classifies each finding by risk level and data exposure, then generates a prioritized remediation plan with actions ranging from approve-with-controls to block-and-notify. Includes communication templates for affected users.