Agent skill · security · jeremylongshore
checking-infrastructure-compliance
Execute use when you need to work with compliance checking.
Why this skill is useful
Provides automation scripts and compliance validation patterns for various frameworks that the AI wouldn't reliably generate on its own.
What it needs
Requires checkov, jq, opa, tfsec installed locally. About 2k tokens when loaded. Last updated 2026-08-07. 2,604 stars on the source repository.
What this skill does
Checking Infrastructure Compliance Overview Audit infrastructure configurations against compliance frameworks (CIS Benchmarks, SOC 2, HIPAA, PCI-DSS, GDPR) using policy-as-code tools like Open Policy Agent (OPA), Checkov, and tfsec. Generate compliance reports, identify violations, and produce remediation plans for Terraform, Kubernetes, and cloud provider configurations. Prerequisites Policy-as-code tool installed: checkov, tfsec, opa, or kube-bench Infrastructure-as-code files (Terraform, CloudFormation, Kubernetes manifests) in the project Cloud provider CLI authenticated with read access to resources Compliance framework requirements documented (CIS, SOC 2, HIPAA, PCI-DSS) jq for parsing JSON policy outputs Instructions 1. Identify the applicable compliance framework(s) based on industry and data classification 2. Scan Terraform files with checkov -d . or tfsec . to detect misconfigurations 3. Scan Kubernetes manifests for security issues: missing resource limits, privileged containers, missing network policies 4. Validate IAM policies for least-privilege violations using cloud-native tools (aws iam access-analyzer) 5. Check encryption at rest and in transit: verify S3 bucket encryption, database TLS, and EBS volume encryption 6. Audit logging configurations: confirm CloudTrail/Cloud Audit Logs are enabled and sent to immutable storage 7. Generate a compliance report mapping each finding to the relevant control (e.g., CIS AWS 2.1.1) 8. Produce remediation Terraform/YAML patches for each violation with severity ranking (Critical, High, Medium, Low) 9. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills jeremylongshore/checking-infrastructure-compliance