Use when you need to perform security analysis across cloud environments. Scans for vulnerabilities, misconfigurations, compliance issues, and threats. Includes automated remediation suggestions and security posture assessment for AWS, Azure, GCP, and on-premise systems.
SkillScore64Maintained
Automatic
◆Security & AppSec pack
Last verified 8/4/2026
What it changes
Passed 14 of 22 test cases with the skill, and 9 of 22 without it.
Without skill41%
With skill64%
Checks it passed that the model alone missed
Confirms default dryRun mode is set to true
Summarizes results across all supported cloud providers
Identifies scripts/security-scanner.py as the scanner implementation
and 2 more in the full report
5 fixed9 passed either way8 still failing0 broke
Pass-rate lift
+23 pp
Tokens
+35%
Agent turns
0%
Response time
-20%
Model gemini-3.6-flashMeasured 8/4/2026v114 of 22 cases passed with skill
Tokens, turns and time describe resource use, not a dollar price.
See it in action
One of 5 test cases the skill fixed. Same model, same prompt, with and without the skill.
1 of 5
Prompt
If no `dryRun` argument is specified when initiating a security analysis on resource `res-001`, what default value should be assumed?
What was checked, without and with the skill
Checked
Without skill
With skill
Confirms default dryRun mode is set to true
Missed
Passed
case-19 · gemini-3.6-flash · 8/4/2026 · answers are capped and redacted
What's inside
The instructions your model reads when the skill loads.
Enterprise-grade automation solution for security analysis operations across AWS, Azure, GCP, and on-premise environments to maximize operational efficiency while maintaining security and compliance standards.
When to Use
Security Audits: When conducting regular security assessments across cloud infrastructure
Compliance Checks: When verifying compliance with standards like SOC2, HIPAA, GDPR, PCI-DSS
Vulnerability Scanning: When scanning for security vulnerabilities in systems and applications
Incident Investigation: When analyzing security incidents or potential breaches
New Deployments: When security-reviewing new infrastructure or application deployments
Risk Assessment: When evaluating security risks for business decisions
Threat Hunting: When proactively searching for potential security threats
Gotchas
Common Pitfalls
False Positives: Automated security scans often flag benign configurations as issues
Alert Fatigue: Too many security alerts can cause real issues to be overlooked
Scope Creep: Security analysis can expand to include more than originally planned
Credential Exposure: Security analysis tools may require sensitive credentials
Edge Cases
Legacy Systems: Older systems may not meet modern security standards but can't be easily updated
Third-Party Dependencies: Security issues in external services may be outside your control
Compliance Conflicts: Different compliance frameworks may have conflicting requirements
Multi-Cloud Complexity: Security policies may need to be adapted for different cloud providers
Performance Issues
Scan Duration: Comprehensive security scans can take hours for large environments
API Rate Limits: Security scanning APIs often have strict rate limits
Resource Usage: Security scanning tools can consume significant compute resources
Network Latency: Cross-region security checks may be slow due to network latency
Security Considerations
Privilege Escalation: Security analysis tools require elevated privileges that could be misused
Data Privacy: Security logs may contain sensitive information requiring protection
Audit Trails: All security analysis activities must be logged for compliance
Tool Security: Security analysis tools themselves must be secure and regularly updated