Agent skill · security · aradotso
iac-security-scan-skills
AI-powered Infrastructure-as-Code security scanner with attack chain analysis and multi-domain vulnerability detection
Why this skill is useful
Adds a comprehensive IaC security scanning capability with multi-domain vulnerability detection and attack chain analysis that the AI cannot generate on its own.
What it needs
Requires git installed locally. About 9k tokens when loaded. Last updated 2026-08-04. 11 stars on the source repository.
What this skill does
IaC Security Scanner Skills Skill by ara.so — Security Skills collection. AI-powered security assessment for Infrastructure-as-Code that provides deep, context-aware security analysis of Terraform and CloudFormation projects. Unlike traditional linters, this scanner identifies cross-domain attack chains, privilege escalation paths, and compliance gaps through multi-stage analysis orchestrated entirely by AI agents. What It Does The scanner runs a 3-step pipeline: 1. Analysis — Maps repository structure, resources, trust boundaries, and exposure points 2. Domain Scanning — Parallel security analysis across IAM, network, storage, secrets, logging, and serverless domains 3. Attack Chain Correlation — Identifies composite attack paths across domains and calculates minimum-cut fixes Key Features: Cross-domain attack chain detection (internet → workload → IAM → data) Minimum-cut analysis (smallest set of fixes that breaks the most attack paths) Confidence scores (0.0–1.0) based on IaC evidence vs heuristics Multiple scan modes (full, fast, scoped) Parallel domain analysis with intelligent file routing HTML, CSV, and terminal output formats Installation Copy the scanner skills into your IaC project root: IDE Compatibility: .agents/skills/ — Opencode, Codex CLI, Windsurf .claude/skills/ — Claude Code .cursor/skills/ — Cursor All directories contain identical skills; the orchestration files (AGENTS.md or CLAUDE.md) route to the correct location. Scan Modes Full Scan Runs complete pipeline: analysis → all domain skills → attack chains → report. Or target a specific directory: Output: iac-scan/analysis.md — Repository intelligence (≤120 lines) iac-scan/{domain}-results.md — Findings per domain (≤150 lines each) iac-scan/attack-chain-results.md — Cross-domain attack paths iac-scan/report.html — Full HTML report iac-scan/findings.csv — Spreadsheet export iac-scan/architecture-diagram.html — Visual architecture Fast Scan Single-pass analysis for quick PR checks. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aradotso/iac-security-scan-skills