iac-security-review
iac-security-review is an Application security skill for AI agents, published by OWASP in the secure-agent-playbook repository on GitHub. Skillspace rates iac-security-review C (74/100) and it passed the safety scan; the rating is based on static analysis only.
Security review of Infrastructure-as-Code (Terraform, Kubernetes, CloudFormation). Use when reviewing IaC files for misconfigurations, overpermissioning, exposed resources, missing encryption, secrets in code, and supply chain risks. Covers CIS benchmarks and cloud security best practices.
- Grade
- C
- Quality
- 74 / 100
- Safety
- Passed
- GitHub stars
- 120
Unproven: rated by static analysis only, not yet compared head-to-head.
This rating describes the version of the repository we crawled; it may have changed since, so go by its current files.
Our review
- Architecture
- 100 / 100
- Maturity
- Basic: a single SKILL.md
- Security scan
- No issues found
- License
- Not declared. Check the repository before reusing it.
- Adoption
- Adopted by 1 other repositories, in 0 collections
- Scope
- Portable: works in any project. Generic IaC security review across Terraform, Kubernetes and CloudFormation
Not checked yet
- Not judged on the rubric yet (not a contender in its category)
- No blind task eval yet
- Sibling files (scripts, references) not fetched; security scan covers SKILL.md only
Skillspace indexes and rates this skill; it does not host or endorse it. Run third-party skills at your own risk.