aws-security-scanner

1.8k

openclaw

Scan AWS accounts for security misconfigurations and vulnerabilities. Use when user asks to audit AWS security, check for misconfigurations, find exposed S3 buckets, review IAM policies, check security groups, audit CloudTrail, or run AWS security checks. Covers S3, IAM, EC2, RDS, CloudTrail, and common CIS benchmarks.

multi-cloud-security-posture

376

a5c-ai

Unified cloud security posture management across AWS, Azure, and GCP with normalized metrics and CIS benchmark comparison

security-hardening

296

ancoleman

Reduces attack surface across OS, container, cloud, network, and database layers using CIS Benchmarks and zero-trust principles. Use when hardening production infrastructure, meeting compliance requirements, or implementing defense-in-depth security.

Terraform Security Scan

12

thomast1906

Perform security scanning and compliance checking of Terraform configurations for Azure. Use this skill when scanning for security issues, checking CIS/Azure Security Benchmark compliance, auditing Terraform code for vulnerabilities, implementing security gates in CI/CD pipelines, vulnerability scan, security audit, compliance check, CIS benchmark, tfsec, or checkov.

linux-hardening

10

BagelHole

Apply CIS benchmarks and secure Linux servers. Configure SSH, manage users, implement firewall rules, and enable security features. Use when hardening Linux systems for production or meeting security compliance requirements.

windows-hardening

10

BagelHole

Harden Windows servers per security baselines and CIS benchmarks. Configure Group Policy, Windows Defender, and security features. Use when securing Windows Server environments.

cis-benchmarks

10

BagelHole

Audit and remediate CIS benchmark violations. Use automated tools to assess compliance and implement hardening recommendations. Use when meeting compliance requirements or implementing security baselines.

k8s-security

4

Kcns008 Cluster Code K8s Security

Kubernetes and OpenShift security assessment, hardening, and compliance. Use this skill when: (1) Auditing cluster or workload security posture (2) Implementing Pod Security Standards/Admission (3) Configuring RBAC roles and permissions (4) Setting up NetworkPolicies for zero-trust (5) Managing Secrets securely (encryption, external secrets) (6) Scanning images for vulnerabilities (7) Implementing OCP SecurityContextConstraints (8) Compliance checking (CIS benchmarks, SOC2, PCI-DSS) (9) Security incident investigation (10) Hardening cluster components

hardening-docker-daemon-configuration

2

mukul975

Harden the Docker daemon by configuring daemon.json with user namespace remapping, TLS authentication, rootless mode, and CIS benchmark controls.

hardening-linux-endpoint-with-cis-benchmark

2

mukul975

Hardens Linux endpoints using CIS Benchmark recommendations for Ubuntu, RHEL, and CentOS to reduce attack surface, enforce security baselines, and meet compliance requirements. Use when deploying new Linux servers, remediating audit findings, or establishing security baselines for Linux infrastructure. Activates for requests involving Linux hardening, CIS benchmarks for Linux, server security baselines, or Linux configuration compliance.

hardening-windows-endpoint-with-cis-benchmark

2

mukul975

Hardens Windows endpoints using CIS (Center for Internet Security) Benchmark recommendations to reduce attack surface, enforce security baselines, and meet compliance requirements. Use when deploying new Windows workstations or servers, remediating audit findings, or establishing organization-wide security baselines. Activates for requests involving Windows hardening, CIS benchmarks, GPO security baselines, or endpoint configuration compliance.

performing-kubernetes-cis-benchmark-with-kube-bench

2

mukul975

Audit Kubernetes cluster security posture against CIS benchmarks using kube-bench with automated checks for control plane, worker nodes, and RBAC.

Compliance Report

pitimon

Generate a compliance mapping report for scan findings. Maps vulnerabilities to NIST SP 800-53, OWASP Top 10, MITRE ATT&CK, and CIS Benchmarks.

cspm-prowler

Poatan222

Analyze Prowler CSPM scan outputs, prioritize cloud misconfigurations by risk, and generate remediation plans with compliance mapping. Supports AWS, Azure, and GCP findings. Trigger when user uploads Prowler output files (.csv, .json, .html), mentions "Prowler", "CSPM", "cloud security posture", "cloud misconfiguration", "CIS benchmark", "cloud compliance scan", or asks about cloud security findings. Also trigger when user pastes Prowler CLI output or asks how to run Prowler against their cloud environment.