vulnetix/pix-ai-coding-assistant · skills/iac-scan/SKILL.md
iac-scan skillA
Terraform / OpenTofu / Nix / k8s manifest misconfiguration detection — open security groups, missing encryption, public S3/GCS, IAM wildcards, plaintext secrets, missing tags. Use when reviewing an IaC PR, gating `terraform apply` / `tofu apply`, auditing existing state for drift, or building a compliance report for cloud configuration.
Latest version
mdr add vulnetix/pix-ai-coding-assistant/iac-scan@git:20260904.974b690Exact content
mdr add vulnetix/pix-ai-coding-assistant/iac-scan@sha256:3b389c09d3f88999Badge
[](https://markdownregistry.com/a/art_nnfgmssqsxejgtbc)
0 badge views in 30 days
Versions
Audit of the latest version
A 17 of 17 checks passed. Deterministic, no model, same answer every run.
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (3164 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
GitHub
vulnetix/pix-ai-coding-assistant · 9 stars · license Apache-2.0 · pushed 2026-09-04 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_nnfgmssqsxejgtbc GET https://markdownregistry.com/api/v1/resolve?ref=vulnetix/pix-ai-coding-assistant/iac-scan GET https://markdownregistry.com/api/v1/blob/3b389c09d3f88999ca4b9079334af5970e56d464f458abbfc34f3d4e3050a467