Securing Cloud And Supply Chain

This is your go-to when you need to lock down Kubernetes clusters, audit CI/CD pipelines, or review infrastructure as code from a security lens. It covers container escapes, RBAC tightening, admission policies, supply chain attestation with SLSA and Sigstore, cloud IAM anti-patterns, and secrets management. The philosophy is paranoid by design: sign everything, verify everywhere, least privilege by default, and treat internal networks like hostile territory. You'll get concrete policy snippets and minimum-permission examples instead of vague best practice platitudes. If you're debugging why your Terraform has wildcard actions or your GitHub Actions are leaking AWS keys, this skill will walk you through the fix and the OIDC migration path.

Install to Claude Code

npx -y skills add telagod/code-abyss --skill securing-cloud-and-supply-chain --agent claude-code