Skip to content

sysdig/headless-cloud-security

v0.4.2

Sysdig's cloud security expertise, packaged as agent skills that work natively in your AI environment.

GitHubOpen Website
skills

sysdig-onboarding

Interactive onboarding assistant for Sysdig Secure. Guides users through connecting AWS, GCP and Azure cloud accounts, Kubernetes clusters (including Windows nodes), and Linux hosts to Sysdig, plus serverless workload scanning (AWS ECS/Fargate, AWS Lambda, GCP Cloud Run). Presents security capabilities in plain language instead of jargon. Supports guided (interview) and autonomous (all-at-once) modes. Generates Terraform configurations for cloud accounts and Helm values for Kubernetes, validates prerequisites, deploys, and verifies connectivity.

Read SKILL.md at the source

Pinned to revision 03cadb82f5a2, so it is the text this page describes rather than whatever the author pushed since.

Pre-approved tools experimental

Experimental field. Support varies between clients, so this list is what the author declared, not what your client will enforce.

  • Read
  • Glob
  • Grep
  • Write
  • Edit
  • AskUserQuestion
  • Agent
  • Bash(terraform version*)
  • Bash(terraform init*)
  • Bash(terraform validate*)
  • Bash(terraform plan*)
  • Bash(terraform state list*)
  • Bash(terraform state show*)
  • Bash(terraform output*)
  • Bash(AWS_PROFILE=* terraform init*)
  • Bash(AWS_PROFILE=* terraform validate*)
  • Bash(AWS_PROFILE=* terraform plan*)
  • Bash(AWS_PROFILE=* terraform state list*)
  • Bash(AWS_PROFILE=* terraform state show*)
  • Bash(AWS_PROFILE=* terraform output*)
  • Bash(source .sysdig-token && terraform init*)
  • Bash(source .sysdig-token && terraform validate*)
  • Bash(source .sysdig-token && terraform plan*)
  • Bash(source .sysdig-token && terraform state list*)
  • Bash(source .sysdig-token && terraform state show*)
  • Bash(source .sysdig-token && terraform output*)
  • Bash(source .sysdig-token && AWS_PROFILE=* terraform init*)
  • Bash(source .sysdig-token && AWS_PROFILE=* terraform validate*)
  • Bash(source .sysdig-token && AWS_PROFILE=* terraform plan*)
  • Bash(source .sysdig-token && AWS_PROFILE=* terraform state list*)
  • Bash(source .sysdig-token && AWS_PROFILE=* terraform state show*)
  • Bash(source .sysdig-token && AWS_PROFILE=* terraform output*)
  • Bash(aws sts get-caller-identity*)
  • Bash(aws iam simulate-principal-policy*)
  • Bash(aws configure list-profiles*)
  • Bash(AWS_PROFILE=* aws sts get-caller-identity*)
  • Bash(AWS_PROFILE=* aws iam simulate-principal-policy*)
  • Bash(source .sysdig-token && aws sts *)
  • Bash(gcloud auth list*)
  • Bash(gcloud config get-value *)
  • Bash(az account show*)
  • Bash(az role assignment list*)
  • Bash(az ad signed-in-user show*)
  • Bash(kubectl get *)
  • Bash(kubectl describe *)
  • Bash(kubectl logs *)
  • Bash(kubectl auth can-i *)
  • Bash(kubectl cluster-info*)
  • Bash(kubectl config current-context*)
  • Bash(kubectl version*)
  • Bash(helm version*)
  • Bash(helm template*)
  • Bash(helm repo add sysdig https://charts.sysdig.com)
  • Bash(helm repo update*)
  • Bash(helm repo list*)
  • Bash(helm list*)
  • Bash(helm show values*)
  • Bash(*scripts/validate_prereqs.sh *)
  • Bash(*scripts/check_permissions.sh *)
  • Bash(*scripts/verify-cloud-status.sh *)
  • Bash(*scripts/detect-region.sh*)
  • Bash(*scripts/detect-env.sh*)
  • Bash(*scripts/render-recap.sh *)
  • Bash(*scripts/lint_config.sh *)
  • Bash(mkdir -p *)
  • Bash(chmod 600 *)
  • Bash(command -v *)
  • Bash(ls *)
  • Bash(echo "${SYSDIG_SECURE_API_TOKEN:+SET}")
  • Bash(test -s .sysdig-token)
  • Bash(grep -c PASTE_YOUR_TOKEN_HERE .sysdig-token)
  • Bash(systemctl status dragent*)
  • Bash(systemctl is-active dragent*)
  • Bash(journalctl -u dragent*)
  • Bash(sudo test -s /opt/draios/logs/draios.log*)
  • Bash(sudo grep * /opt/draios/logs/draios.log*)
  • Bash(sudo sed -n * /opt/draios/logs/draios.log*)
  • Bash(sudo tail * /opt/draios/logs/draios.log*)
  • Bash(lsmod*)
  • Bash(docker logs sysdig-agent*)
  • Bash(docker inspect sysdig-agent*)
  • Bash(docker exec sysdig-agent grep*)
  • Bash(docker exec sysdig-agent tail*)
  • Bash(uname *)
  • Bash(cat /etc/os-release*)
  • Bash(dpkg --print-architecture*)

Files

Every link opens the file at its source, pinned to the revision this page describes.