Cloud & Infrastructure Resilience Suite
Everything you need to ship cloud infrastructure that doesn't break or get breached. This suite audits your infrastructure-as-code and cloud config for the misconfigurations that cause real breaches, maps your dependency tree to find the single points of failure before they take you down, hardens your container builds, and screens your dependencies for supply-chain risk. Individual gates catch individual problems — together they cover the full path from config to container to dependency to blast radius, so what reaches production is secure, resilient, and audited. Built for DevOps and SRE teams who own uptime.
Works with every agent that reads SKILL.md — Claude Code, Cursor, Codex CLI, Gemini CLI, GitHub Copilot, Windsurf, OpenClaw, and more.
One payment, lifetime access. 4 skills unlock instantly in your library.
30-day refund guarantee
Instant unlock in your library
Free updates from the creator
What's included
4 skills
An adversarial gate that audits cloud and infrastructure-as-code config — Terraform, Kubernetes, IAM, security groups, buckets — for the misconfigurations that cause real breaches, and returns a structured PASS/REVISE/BLOCK verdict with severities and exact fixes before anything reaches your environment.
Map your real cloud dependency tree — data plane and control plane — find the single points of failure ranked by blast radius, catch the classic traps like monitoring that dies with the region it watches, and get a prioritized resilience backlog. The audit every outage post-mortem says to do first.
An adversarial reviewer for Dockerfiles and container builds. It flags root users, image bloat, unpinned or cache-busting layers, leaked secrets, and missing hardening, then returns a PASS / FIX / BLOCK verdict — before you build or push the image.
Audit your project's dependencies for supply-chain risk before they ship. Detects the ecosystem, runs the right vulnerability scanners against live advisory data, and adds the checks tooling misses — outdated or abandoned packages, typosquatted or suspicious names, risky install scripts, and license conflicts — then returns a prioritized fix list and a PASS / REVIEW / BLOCK verdict. It's npm audit with triage and judgment on top.
See it in action
You say
resource "aws_s3_bucket" "logs" { bucket = "app-prod-logs" acl = "public-read" } resource "aws_iam_policy" "app" { policy = jsonencode({ Statement = [{ Effect = "Allow", Action = "", Resource = "" }] }) }
Your agent does
VERDICT: BLOCK
SUMMARY: A log bucket is publicly readable and an IAM policy grants unrestricted access to every action on every resource. Both are critical and this config is not safe to apply.
FINDINGS:
- [SEVERITY: CRITICAL] aws_s3_bucket.logs — acl = "public-read" exposes production logs (which often contain tokens and PII) to the public — set acl to "private" and attach a public-access block.
- [SEVERITY: CRITICAL] aws_iam_policy.app — Action "" on Resource "" is full admin access — scope to the specific actions and ARNs the workload actually needs.
BLOCKERS: both CRITICAL findings must be fixed before apply.
SAFE TO APPLY: no
How to install
Drop the file into your AI Agent. Works with Claude, Cursor, ChatGPT, and 20+ more.