Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →aiskillstore/iac-checkov
Infrastructure as Code (IaC) security scanning using Checkov with 750+ built-in policies for Terraform, CloudFormation, Kubernetes, Dockerfile, and ARM templates.
Passed 18 of 23 test cases with the skill, and 13 of 23 without it.
and 4 more in the full report
6 fixed12 passed either way4 still failing1 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 6 test cases the skill fixed. Same model, same prompt, with and without the skill.
We created a `.checkov.baseline` file last month. Now we want to run a scheduled scan in CI to detect drift (newly introduced security issues) while ignoring historical issues recorded in the baseline file. What CLI command runs this baseline comparison check?
| Checked | Without skill | With skill |
|---|---|---|
| Executes checkov -d ./terraform --baseline .checkov.baseline. | Missed | Passed |
| Evaluates scan findings against the baseline file so existing issues are suppressed and only new drift flags an error. | Passed | Passed |
The instructions your model reads when the skill loads.
Checkov is a static code analysis tool that scans Infrastructure as Code (IaC) files for security misconfigurations and compliance violations before deployment. With 750+ built-in policies, Checkov helps prevent cloud security issues by detecting problems in Terraform, CloudFormation, Kubernetes, Dockerfiles, Helm charts, and ARM templates.
Checkov performs graph-based scanning to understand resource relationships and detect complex misconfigurations that span multiple resources, making it more powerful than simple pattern matching.
# Via pip
pip install checkov
# Via Homebrew (macOS)
brew install checkov
# Via Docker
docker pull bridgecrew/checkov
# Scan all Terraform files in directory
checkov -d ./terraform
# Scan specific file
checkov -f ./terraform/main.tf
# Scan with specific framework
checkov -d ./infrastructure --framework terraform
test cases passed, vs 13 / 23 without
Published skills whose descriptions closely match this one, with their headline benchmark lift.
More skills from the same source and nearby in the registry, with their headline benchmark lift.