uttej-badwane/secure-cloud-prompt-engineering
Plugin Claude Code
Security-focused prompts and Claude Code skills for Infrastructure as Code review. Includes a comprehensive IaC security review skill with compliance mapping to CIS, NIST 800-53, NIST 800-171, PCI-DSS, SOC 2, HIPAA, GDPR, and ISO 27001.
uttej-badwane/secure-cloud-prompt-engineering
Instructions file
Instructions for uttej-badwane/secure-cloud-prompt-engineering, covering claude.md — secure cloud prompt engineering, project purpose, skill: iac security review, slash commands and agents.
uttej-badwane/secure-cloud-prompt-engineering
Agent
Maps a list of security findings to compliance framework control IDs. Use this agent when you have findings from a security review and need to produce a compliance matrix or determine which controls are violated. Delegate with: "compliance-mapper: map these findings to PCI-DSS and HIPAA".
uttej-badwane/secure-cloud-prompt-engineering
Agent
Formats security findings into a structured report (markdown or JSON). Use this agent after a security review to produce a clean, shareable report. Delegate with: "report-generator: format these findings as markdown" or "report-generator: generate JSON output for Jira integration".
uttej-badwane/secure-cloud-prompt-engineering
Agent
Deep security analysis agent for a specific IaC file or module. Use this agent when you need focused, thorough analysis of a single file or tightly scoped module rather than a broad directory scan. Delegate to this agent with: "Use the security-reviewer agent to analyze terraform/vpc.tf" or "security-reviewer: check…
uttej-badwane/secure-cloud-prompt-engineering
Command
Check IaC files against a specific compliance framework.
uttej-badwane/secure-cloud-prompt-engineering
Command
Auto-fix a specific security finding by editing the IaC file directly.
uttej-badwane/secure-cloud-prompt-engineering
Command
Generate a structured security review report in markdown or JSON format.
uttej-badwane/secure-cloud-prompt-engineering
Command
Run a full IaC security review of the current directory or specified files.
uttej-badwane/secure-cloud-prompt-engineering
Command
Scan files for hardcoded secrets, credentials, and sensitive data leaks.
uttej-badwane/secure-cloud-prompt-engineering
Hook
Runs when a session starts, executing session-start.js via node. From uttej-badwane/secure-cloud-prompt-engineering.
uttej-badwane/secure-cloud-prompt-engineering
Hook
Runs on the SessionStop event, executing session-stop.js via node. From uttej-badwane/secure-cloud-prompt-engineering.
uttej-badwane/secure-cloud-prompt-engineering
Hook
Runs before the agent uses a tool for Bash tool calls, executing pre-bash.js via node. From uttej-badwane/secure-cloud-prompt-engineering.
uttej-badwane/secure-cloud-prompt-engineering
Skill Claude CodeCodex
Performs comprehensive security reviews of Infrastructure as Code (IaC) files including Terraform, Kubernetes manifests, Dockerfiles, CloudFormation, Ansible playbooks, Helm charts, and CI/CD pipelines. Checks against CIS benchmarks, NIST 800-53, PCI-DSS, SOC2, HIPAA, and GDPR controls. Use this skill whenever the…