The Agent Skills Directory

[SAFE]: The skill is designed for security auditing of cloud infrastructure using well-known, open-source tooling (Checkov). It aligns with DevSecOps best practices.
[COMMAND_EXECUTION]: The documentation provides standard CLI commands for installing the tool via pip or brew and executing scans on local project directories (e.g., checkov -d ./terraform).
[EXTERNAL_DOWNLOADS]: The configuration includes the --download-external-modules setting, which is a native Checkov feature used to fetch Terraform modules from official registries or version control systems during analysis. This is documented and standard behavior for IaC scanners.
[REMOTE_CODE_EXECUTION]: The skill mentions the ability to load custom security policies from external Git repositories via the --external-checks-git flag. This is a standard feature for organization-wide policy enforcement and centralized management of security rules.
[DATA_EXFILTRATION]: While the tool includes a 'secrets' framework to detect hardcoded credentials in code, the skill itself does not contain any logic to exfiltrate discovered data or sensitive files.

iac-checkov