Agent skill · security · aiskillstore
policy-opa
Policy-as-code enforcement and compliance validation using Open Policy Agent (OPA). Use when: (1) Enforcing security and compliance policies across infrastructure and applications, (2) Validating Kubernetes admission control policies, (3) Implementing policy-as-code for compliance frameworks (SOC2, PCI-DSS, GDPR, HIPAA), (4) Testing and evaluating OPA Rego policies, (5) Integrating policy checks into CI/CD pipelines, (6) Auditing configuration drift against organizational security standards, (7) Implementing least-privilege access controls.
Why this skill is useful
Adds specific OPA Rego policy patterns and compliance frameworks that the AI wouldn't reliably generate on its own.
What it needs
Requires docker, jq, kubectl, opa, yq installed locally. About 6k tokens when loaded. Last updated 2026-08-07. 405 stars on the source repository.
What this skill does
Policy-as-Code with Open Policy Agent Overview This skill enables policy-as-code enforcement using Open Policy Agent (OPA) for compliance validation, security policy enforcement, and configuration auditing. OPA provides a unified framework for policy evaluation across cloud-native environments, Kubernetes, CI/CD pipelines, and infrastructure-as-code. Use OPA to codify security requirements, compliance controls, and organizational standards as executable policies written in Rego. Automatically validate configurations, prevent misconfigurations, and maintain continuous compliance. Quick Start Install OPA Basic Policy Evaluation Core Workflow Step 1: Define Policy Requirements Identify compliance requirements and security controls to enforce: Compliance frameworks (SOC2, PCI-DSS, GDPR, HIPAA, NIST) Kubernetes security policies (pod security, RBAC, network policies) Infrastructure-as-code policies (Terraform, CloudFormation) Application security policies (API authorization, data access) Organizational security standards Step 2: Write OPA Rego Policies Create policy files in Rego language. Use the provided templates in assets/ for common patterns: Example: Kubernetes Pod Security Policy Example: Compliance Control Validation (SOC2) Step 3: Test Policies with Unit Tests Write comprehensive tests for policy validation: Run tests: Step 4: Evaluate Policies Against Configuration Use the bundled evaluation script for policy validation: Or use OPA directly: Step 5: Integrate with CI/CD Pipelines Add policy validation to your CI/CD workflow: GitHub Actions Example: GitLab CI Example: Step 6: Deploy as Kubernetes Admission Controller Enforce policies at cluster level using OPA Gatekeeper: Step 7: Monitor Policy Compliance Generate compliance reports using the bundled reporting script: Security Considerations Policy Versioning: Store policies in version control with change tracking and approval workflows Least Privilege: Grant minimal permissions for policy evaluation - OPA shoul …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aiskillstore/policy-opa