Connect to an AWS account, validate credentials, and discover what services are in use.
EnglishConnect to an Azure subscription, validate credentials, and discover what services are in use.
EnglishConnect to a GCP project, validate credentials, and discover what services are in use.
EnglishDeep HIPAA Security Rule technical audit mapping code-level findings to 45 CFR sections. Covers administrative safeguards (164.308 -- risk analysis, workforce security, access management, incident procedures, contingency planning), physical safeguards (164.310 -- facility access, workstation security, session timeout, device controls, crypto-shredding), and technical safeguards (164.312 -- unique user IDs, emergency break-glass access, automatic logoff, AES-256 PHI encryption, audit controls with 6-year retention, data integrity checksums, MFA authentication, TLS transmission security, network segmentation). Traces PHI data flows through ingestion, processing, caching, storage, transmission, and disposal. Use when building or auditing healthcare apps, EHR integrations, FHIR APIs, telehealth platforms, or any system handling protected health information.
EnglishAssess ISO/IEC 27001 ISMS compliance — Annex A controls, risk treatment, Statement of…
EnglishAuto-fill security questionnaires (SIG Lite, CAIQ, Enterprise) using scan data and policy documents.
EnglishGet interactive remediation guidance for compliance findings, including Terraform code and step-by-step instructions.
EnglishGenerate test report. Use when user says "test report", "results summary", "test status", "show results", "test dashboard", or "how did tests go".
EnglishRun a periodic IAM access review — lists all users, permissions, activity, and flags issues. Required quarterly for SOC 2.
EnglishGenerate a Software Bill of Materials (SBOM) from your AWS environment and scan for vulnerable/compromised packages.
EnglishGenerate a personalized threat advisory based on your tech stack — what CVEs, breaches, and supply chain attacks matter to YOU.
EnglishGenerate a public-facing security trust page from scan data. Produces a single deployable index.html that shows compliance framework scores, security policies, infrastructure overview, and data protection posture. Deployable to S3, Vercel, Netlify, or GitHub Pages.
EnglishIncludes Connect AWS, Connect Azure, Connect GCP, and other workflows.
Supported by the Atlas install prompt. Skill-specific requirements vary.
Pack stats
What’s included
Connect AWS
Connect to an AWS account, validate credentials, and discover what services are in use.
Connect Azure
Connect to an Azure subscription, validate credentials, and discover what services are in use.
Connect GCP
Connect to a GCP project, validate credentials, and discover what services are in use.
Evidence
Collect and store point-in-time compliance evidence snapshots for audit trail.
Hipaa
Deep HIPAA Security Rule technical audit mapping code-level findings to 45 CFR sections. Covers administrative safeguards (164.308 -- risk analysis, workforce security, access management, incident procedures, contingency planning), physical safeguards (164.310 -- facility access, workstation security, session timeout, device controls, crypto-shredding), and technical safeguards (164.312 -- unique user IDs, emergency break-glass access, automatic logoff, AES-256 PHI encryption, audit controls with 6-year retention, data integrity checksums, MFA authentication, TLS transmission security, network segmentation). Traces PHI data flows through ingestion, processing, caching, storage, transmission, and disposal. Use when building or auditing healthcare apps, EHR integrations, FHIR APIs, telehealth platforms, or any system handling protected health information.
Iso27001
Assess ISO/IEC 27001 ISMS compliance — Annex A controls, risk treatment, Statement of Applicability
Policy Gen
Generate SOC 2 compliance policy documents tailored to your company.
Questionnaire
Auto-fill security questionnaires (SIG Lite, CAIQ, Enterprise) using scan data and policy documents.
Remediate
Get interactive remediation guidance for compliance findings, including Terraform code and step-by-step instructions.
Report
Generate test report. Use when user says "test report", "results summary", "test status", "show results", "test dashboard", or "how did tests go".
Review Access
Run a periodic IAM access review — lists all users, permissions, activity, and flags issues. Required quarterly for SOC 2.
Sbom
Generate a Software Bill of Materials (SBOM) from your AWS environment and scan for vulnerable/compromised packages.
Threat Advisory
Generate a personalized threat advisory based on your tech stack — what CVEs, breaches, and supply chain attacks matter to YOU.
Trust Center
Generate a public-facing security trust page from scan data. Produces a single deployable index.html that shows compliance framework scores, security policies, infrastructure overview, and data protection posture. Deployable to S3, Vercel, Netlify, or GitHub Pages.
Vendor Risk
Paste a vendor's domain. Get a security risk assessment in 60 seconds.
Quick start
- Choose your skills. Select individual skills above, or choose the entire pack.
- Copy the install prompt. Use Copy install prompt above the list.
- Send it to your agent. Paste into your coding agent’s chat. Your agent reviews the source and guides the setup.
Try it with your agent
After installation, start with a request like:
Use the Connect AWS skill to help with my task.
Ask me for the context you need before getting started.Requirements & license
- A coding agent that can access your project files and install skills.
- Your agent checks each skill’s instructions, dependencies, and permissions during setup.
- Reported license for the skills shown: MIT. The author’s terms apply.