sysdig-posture

Author Sysdig Secure Posture custom controls (Rego) and custom policies, and emit Terraform via the Sysdig provider. Use when the user wants to "write a posture rule," "create a custom CSPM control," "fail my policy when an S3 bucket is unencrypted," or "group these CIS controls into a custom policy." Never writes to Sysdig directly — all writes go through Terraform on user approval. Not for: zone management, built-in Sysdig controls, runtime threat detection, vulnerable-image triage or remediation, or onboarding cloud accounts.

Read SKILL.md at the source

Pinned to revision 03cadb82f5a2, so it is the text this page describes rather than whatever the author pushed since.

Pre-approved tools experimental

Experimental field. Support varies between clients, so this list is what the author declared, not what your client will enforce.

Read
Glob
Grep
Write
Edit
AskUserQuestion
Agent
Bash(terraform init*)
Bash(terraform validate*)
Bash(terraform plan*)
Bash(terraform state list*)
Bash(terraform state show*)
Bash(terraform output*)
Bash(terraform version*)
Bash(command -v *)
Bash(scripts/*)
Bash(echo "${SYSDIG_SECURE_URL:+SET}")
Bash(echo "${SYSDIG_SECURE_API_TOKEN:+SET}")
Bash(mkdir -p *)
Bash(ls *)

Files

Every link opens the file at its source, pinned to the revision this page describes.