{"id":"cmuxoat70332ead07hrxlrp4g","slug":"techtide-aws-security-posture-hardening","publicId":"36b38922-6702-4163-b9c5-55502a929889","name":"techtide-aws-security-posture-hardening","description":"Review broad AWS security posture across Security Hub CSPM, GuardDuty, Inspector, Macie, Config, CloudTrail, IAM, public exposure, vulnerability findings, and remediation governance. Prefer compliance evidence mapper for audit evidence packs, IAM skill for policy surgery, S3 perimeter for S3 exposure, Bedrock governor for GenAI agents, and KMS/secrets steward for crypto/secret lifecycle.","version":"0.1.2","author":"github: TechTide","license":"Apache-2.0","compatibility":"","status":"completed","overallGrade":"B","scannerVersion":11,"fileCount":5,"hasSkillMd":true,"hasScripts":false,"hasReferences":true,"hasEvals":false,"hasAssets":false,"sourceType":"github","sourceUrl":"https://github.com/techtideohio/techtide-harness-kit/tree/master/skills/aws/techtide-aws-security-posture-hardening","createdAt":"2026-10-07T05:34:38.796Z","completedAt":"2026-10-07T05:34:38.794Z","visibility":"public","publishedAt":"2026-09-03T05:57:24.472Z","category":"","frameworks":[],"badgeStatus":"conditional","downloadCount":0,"verdictRationale":{"summary":"Skill has warnings: 1 warning in security or structure checks.","verdict":"warn","scanners":[{"source":"vettd","weight":1,"verdict":"warn"},{"source":"cisco","weight":0.8,"verdict":"pass"}],"consensus":"warn","warnTriggers":["References external URL — review for indirect prompt injection risk"],"policyVersion":"consensus-v1","hardFailTriggers":[]},"verdictPolicyVersion":"consensus-v1","skillId":"cmtl453tz82buad09ewemeyyj","findings":[{"id":"cmuxoat70332gad07vk9myqdh","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/official-sources.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088","owaspLlmCategory":null,"intent":null,"chainId":null,"fingerprint":"39ceed92ece18d63dcce96f46220fe93","filepath":"references/official-sources.md"},{"id":"cmuxoat70332had07ie6q47hy","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE","owaspLlmCategory":null,"intent":null,"chainId":null,"fingerprint":"592f7ac7731768f0fd0bba83f30850f9","filepath":"SKILL.md"}],"scannerRuns":[{"source":"cisco","status":"success","verdict":null,"grade":"A","findingCount":1,"criticalCount":0,"highCount":0},{"source":"vettd","status":"success","verdict":null,"grade":"B","findingCount":1,"criticalCount":0,"highCount":0}],"user":{"name":"Kris Mondlane","image":"https://avatars.githubusercontent.com/u/237055?v=4"},"repository":{"owner":"techtideohio","name":"techtide-harness-kit"},"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T05:01:39.855Z","lastVerifiedAt":"2026-10-22T05:01:39.855Z","lastChangeDetectedAt":null,"scannedHash":"c93d463b41c6352cc517a4f6be26d93c23c84273","latestUpstreamHash":"c93d463b41c6352cc517a4f6be26d93c23c84273","nextCheckDueAt":"2026-10-23T05:32:27.861Z"},"signalCategories":[{"category":"safety","label":"Safety","form":"graded","verdict":null,"rows":[]},{"category":"reliability","label":"Reliability & Quality","form":"graded","verdict":null,"rows":[]},{"category":"performance","label":"Performance","form":"measured","verdict":{"form":"measured","magnitudes":[{"ruleId":"performance/static-context-tokens","label":"Static context tokens","value":451,"unit":null,"method":"tiktoken/cl100k_base/skill-md-body"}]},"rows":[{"origin":"signal","id":"cmuxob14e34cxad07iaqbm6ei","subjectType":"skill_audit","subjectId":"cmuxoat70332ead07hrxlrp4g","relatedType":"","relatedId":"","dataCategory":"performance","sourceClass":"scan","source":"vettd","ruleId":"performance/progressive-disclosure","severity":null,"label":"Progressive disclosure","detail":null,"valueNum":null,"valueText":"present","unit":null,"method":null,"derivation":"read","confidence":null,"sampleSize":null,"synthetic":false,"firstParty":true,"observedAt":"2026-10-07T05:34:32.000Z","payload":null},{"origin":"signal","id":"cmuxoau14339jad07drat53yu","subjectType":"skill_audit","subjectId":"cmuxoat70332ead07hrxlrp4g","relatedType":"","relatedId":"","dataCategory":"performance","sourceClass":"scan","source":"vettd","ruleId":"performance/static-context-tokens","severity":null,"label":"Static context tokens","detail":null,"valueNum":451,"valueText":null,"unit":null,"method":"tiktoken/cl100k_base/skill-md-body","derivation":null,"confidence":null,"sampleSize":null,"synthetic":false,"firstParty":true,"observedAt":"2026-10-07T05:34:32.000Z","payload":null}]},{"category":"cost","label":"Cost","form":"measured","verdict":null,"rows":[]},{"category":"compatibility","label":"Compatibility","form":"unjudged","verdict":{"form":"unjudged"},"rows":[{"origin":"signal","id":"cmuxoau9n33b9ad07t7nw46g4","subjectType":"skill_audit","subjectId":"cmuxoat70332ead07hrxlrp4g","relatedType":"","relatedId":"","dataCategory":"compatibility","sourceClass":"scan","source":"vettd","ruleId":"compatibility/declared-environment-assumptions","severity":null,"label":"Declared environment assumptions","detail":null,"valueNum":null,"valueText":"","unit":null,"method":null,"derivation":"read","confidence":null,"sampleSize":null,"synthetic":false,"firstParty":true,"observedAt":"2026-10-07T05:34:32.000Z","payload":null},{"origin":"signal","id":"cmuxoayyl33u0ad07jcc7tvez","subjectType":"skill_audit","subjectId":"cmuxoat70332ead07hrxlrp4g","relatedType":"","relatedId":"","dataCategory":"compatibility","sourceClass":"scan","source":"vettd","ruleId":"compatibility/declared-name","severity":null,"label":"Declared skill name","detail":null,"valueNum":null,"valueText":"techtide-aws-security-posture-hardening","unit":null,"method":null,"derivation":"read","confidence":null,"sampleSize":null,"synthetic":false,"firstParty":true,"observedAt":"2026-10-07T05:34:32.000Z","payload":null},{"origin":"signal","id":"cmuxoavcd33jsad07r201zy9l","subjectType":"skill_audit","subjectId":"cmuxoat70332ead07hrxlrp4g","relatedType":"declared_tool","relatedId":"Glob","dataCategory":"compatibility","sourceClass":"scan","source":"vettd","ruleId":"compatibility/declared-required-tools","severity":null,"label":"Declared required tool","detail":null,"valueNum":null,"valueText":"Glob","unit":null,"method":null,"derivation":"read","confidence":null,"sampleSize":null,"synthetic":false,"firstParty":true,"observedAt":"2026-10-07T05:34:32.000Z","payload":null},{"origin":"signal","id":"cmuxoavxp33m3ad076gztalkj","subjectType":"skill_audit","subjectId":"cmuxoat70332ead07hrxlrp4g","relatedType":"declared_tool","relatedId":"Grep","dataCategory":"compatibility","sourceClass":"scan","source":"vettd","ruleId":"compatibility/declared-required-tools","severity":null,"label":"Declared required tool","detail":null,"valueNum":null,"valueText":"Grep","unit":null,"method":null,"derivation":"read","confidence":null,"sampleSize":null,"synthetic":false,"firstParty":true,"observedAt":"2026-10-07T05:34:32.000Z","payload":null}]},{"category":"sentiment","label":"Popularity","form":"unjudged","verdict":null,"rows":[]},{"category":"characteristics","label":"Characteristics","form":"unjudged","verdict":null,"rows":[]}],"signalCount":27,"publisherSupplied":["name","description","author","version","license"]}