Config Scan
This catches the configuration mistakes that slip through code review and come back to haunt you in production. It scans Dockerfiles for root users and copied secrets, checks Kubernetes manifests for privileged containers and missing resource limits, audits Terraform for public S3 buckets and overly permissive IAM policies, and flags debug modes left on in application config. The severity ratings are sensible (committed .env files are CRITICAL, unpinned Docker tags are MEDIUM), and it includes actual remediation examples instead of just complaining. Run it before deployment or wire it into CI to fail builds on high-severity findings. The ignore rules let you suppress false positives without disabling entire categories.
- skills.sh installs
- 349
- GitHub stars
- 182
- last updated
- Aug 21, 2026
Install
$ npx -y skills add jwynia/agent-skills --skill config-scan --agent claude-codeInstalls into .claude/skills of the current project.
Files
Config Scan
Security review of configuration files and infrastructure as code.
Quick Start
/config-scan # Scan all config files
/config-scan --docker # Docker files only
/config-scan --k8s # Kubernetes manifests
/config-scan --terraform # Terraform files
/config-scan --env # Environment files
What This Skill Detects
Environment Files
- Secrets in
.envfiles - Insecure default values
- Missing required security variables
Docker Security
- Running as root
- Exposed sensitive ports
- Insecure base images
- Missing security options
Kubernetes Security
- Privileged containers
- Missing resource limits
- Insecure service accounts
- Network policy gaps
Infrastructure as Code
- Overly permissive IAM policies
- Public S3 buckets
- Unencrypted storage
- Missing security groups
Application Config
- Debug mode enabled
- Verbose error messages
- Insecure defaults
Scan Categories
Environment Files
Files scanned: .env, .env.*, *.env
Sponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageDetails
- Repository
- github.com/jwynia/agent-skills
- Categories
- Security, DevOps & CI/CD, AI & Agent Building, Cloud & Infrastructure
- First seen
- Jun 3, 2026
More from jwynia/agent-skills
All 118- Agile Coordinator338
- Agent Bootstrap335
- Npm Package334
- Non Fiction Revision331
- Blind Spot Detective330
- Devcontainer327
- Gitea Coordinator320
- Github Agile314
- Web Search Brave314
- Npx Cli307
- Media Meta Analysis284
- Presentation Design2.7K
- Frontend Design2.3K
- Requirements Analysis2.3K
- Godot Best Practices2.1K
- Web Search Tavily1.1K
- Godot Asset Generator1K
- Document To Narration994
- Pdf Generator921
- Story Coach895
- Electron Best Practices863
- Web Search780
- Fact Check771
- Worldbuilding753
Recommended
More Security
internet-identitydfinity/icskillsIntegrate Internet Identity authentication. Covers passkey and OpenID sign-in flows, delegation handling, and principal-per-app isolation. Use when adding sign-343skills.sh installs
phoenix-opsbobmatnyc/claude-mpm-skillsPhoenix operations and deployment: releases, runtime configuration, clustering, libcluster, telemetry/logging, secrets, assets, background jobs, and production 341skills.sh installs
code-auditormhattingpete/claude-skills-marketplacePerforms comprehensive codebase analysis covering architecture, code quality, security, performance, testing, and maintainability. Use when user wants to audit 341skills.sh installs
audio-voice-recoverypproenca/dot-skillsAudio forensics and voice recovery guidelines for CSI-level audio analysis. This skill should be used when recovering voice from low-quality or low-volume audio340skills.sh installs
syncfusion-angular-commonsyncfusion/angular-ui-components-skillsCommon utilities and features for Syncfusion Angular components. Use this skill when the user needs to implement animations, drag-and-drop, state persistence, R338skills.sh installs
understanding-tauri-architecturedchuk/claude-code-tauri-skillsTeaches Claude about Tauri's core architecture, including the Rust backend, webview integration, Core-Shell design pattern, IPC mechanisms, and security model f334skills.sh installs