Cloud Security

knowledge skill

The agent reviews cloud infrastructure definitions against a set of security policies and generates a structured security findings report. The report lists each non‑compliant resource, a severity rating, and concrete remediation steps.

Worked examples

• {"input": {"cloud_provider": "AWS", "resource_definitions": [{"type": "S3Bucket", "name": "my-bucket", "publicAccess": true}], "policy_set": ["CIS-1.2", "PCI-DSS"]}, "output": {"findings": [{"resource": "my-bucket", "issue": "Public access enabled", "severity": "high"}], "summary": "1 high severity issue found.", "remediation_steps": ["Disable public access on my-bucket."]}}
• {"input": {"cloud_provider": "GCP", "resource_definitions": [{"type": "ComputeInstance", "name": "web-server", "serviceAccount": "default"}], "policy_set": ["CIS-1.3"]}, "output": {"findings": [], "summary": "No policy violations detected.", "remediation_steps": []}}

Input

• cloud_provider: string – name of the cloud platform (e.g., AWS, GCP)
• resource_definitions: list – JSON objects describing resources and their settings
• policy_set: list – identifiers of security policies to apply

Output

• findings: list – objects with resource, issue, and severity
• summary: string – brief overall result
• remediation_steps: list – actionable fixes for each finding

Details

• Skill type: knowledge skill
• Safety level: safe_public_research
• Version: 1.0.0