Security operations
Agent skills and MCP servers for security operations that Spellwarden has checked. Each entry shows what was checked and when.
external-secrets
Reference notes for External Secrets Operator: SecretStore, ExternalSecret, PushSecret, templates, Vault auth, Helm values and common mistakes.
No open critical or high findings. 1 open medium or low finding.
Curated
okta
Playbook for running Okta Workforce Identity: SSO apps, sign-on policies, SCIM rollout, IdP migration, login debugging, key rotation and admin audits.
No open critical or high findings. 1 open medium or low finding.
Curated
workload-identity
Playbook for service-to-service identity: pick SPIFFE or SPIRE versus cloud IAM, deploy SPIRE on EKS, federate trust domains, bridge to clouds via OIDC.
No open critical or high findings. 1 open medium or low finding.
Curated
sc-iac
Reviews Dockerfiles, Kubernetes manifests, Terraform and GitHub Actions workflows for security misconfigurations and reports findings by severity.
No open critical or high findings.
Curated
secrets-manager
Reference for creating, reading, updating and rotating AWS Secrets Manager secrets via CLI, boto3 and CloudFormation, with rotation Lambda examples.
No open critical or high findings. 3 open medium or low findings.
Curated
opa
Writes, tests, lints, explains and debugs OPA Rego policies for Conftest, using conftest and regal commands and placing the check as a CI gate.
No open critical or high findings. 1 open medium or low finding.
Curated