auditing-terraform-infrastructure-for-security

Auditing Terraform infrastructure-as-code for security misconfigurations using Checkov, tfsec, Terrascan, and OPA/Rego policies to detect overly permissive IAM policies, public resource exposure, missing encryption, and insecure defaults before cloud deployment.

1.01x

Quality

62%

Does it follow best practices?

Impact

91%

1.01x

Average score across 3 eval scenarios

Securityby

Passed

No known issues

Fix and improve this skill with Tessl

tessl review fix ./skills/auditing-terraform-infrastructure-for-security/SKILL.md

Evaluation results

91%

Terraform Security Audit for ACME Corp Infrastructure

Multi-tool Terraform security audit with structured report

Criteria

Without context

With context

Checkov JSON output

100%

Checkov --framework terraform

100%

tfsec JSON output

100%

tfsec severity filter

Report header block

100%

SCAN RESULTS section

62%

100%

CRITICAL FINDINGS section

100%

SUMMARY BY SEVERITY section

88%

100%

Checkov -d flag used

100%

Both tools used

100%

Failed

Custom OPA/Rego policy writing and Conftest evaluation

92%

-1%

Adding Security Scanning to FinTech Co's Terraform CI/CD Pipeline

CI/CD security pipeline with incremental rollout strategy

Criteria

Without context

With context

Checkov GitHub Action

100%

Checkov framework set

100%

Checkov SARIF output

100%

87%

tfsec GitHub Action

100%

SARIF upload step

100%

90%

Trigger on terraform paths

100%

Incremental rollout strategy

100%

soft_fail for gradual rollout

70%

80%

OPA/Conftest step

100%

Terraform init and plan steps

66%

Repository: mukul975/Anthropic-Cybersecurity-Skills
Commit: 7eebca8

Evaluated: 18 days ago
Agent: Claude Code
Model: Claude Sonnet 4.6

Table of Contents

Terraform Security Audit for ACME Corp Infrastructure Custom OPA/Rego policy writing and Conftest evaluation Adding Security Scanning to FinTech Co's Terraform CI/CD Pipeline

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.