Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →grcengclub/wiz-inspector-expert
Use `wiz-inspector` when Wiz CNAPP is the source of cloud posture, vulnerability, toxic-combination, or inventory evidence.
Passed 22 of 22 test cases with the skill, and 11 of 22 without it.
and 12 more in the full report
12 fixed11 passed either way0 still failing0 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 11 test cases the skill fixed. Same model, same prompt, with and without the skill.
When setting up the Wiz posture integration, we omitted the auth endpoint variable. What default endpoint URL does the client use to request OAuth tokens?
| Checked | Without skill | With skill |
|---|---|---|
| The response names https://auth.app.wiz.io/oauth/token as the default authentication URL. | Missed | Passed |
The instructions your model reads when the skill loads.
Use wiz-inspector when Wiz CNAPP is the source of cloud posture, vulnerability, toxic-combination, or inventory evidence.
Inputs:
WIZ_CLIENT_IDWIZ_CLIENT_SECRETWIZ_API_URL, for example https://api.<region>.app.wiz.io/graphqlWIZ_AUTH_URL, defaulting to https://auth.app.wiz.io/oauth/tokenWIZ_PROJECT_ID to constrain collection to a Wiz projectread:projects, read:issues, read:vulnerabilities, read:inventoryRun /wiz-inspector:setup, then /wiz-inspector:collect. Findings are emitted using schemas/finding.schema.json and can feed GRC Engineering gap assessments, OSCAL exports, workpaper generation, and remediation workflows.
The collector handles cursor pagination, project scoping, Wiz severity/status normalization, and partial results. If a GraphQL resource query fails, it emits an inconclusive Finding for that endpoint and continues collecting the remaining resource types.
test cases passed, vs 11 / 22 without
More skills from the same source and nearby in the registry, with their headline benchmark lift.