The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses the ccloud CLI and cockroach sql to gather configuration data from the cluster. It also employs standard security utilities like openssl and sslyze to probe TLS settings. All shell and SQL operations are restricted to read-only commands (e.g., list, info, SHOW, SELECT).
[EXTERNAL_DOWNLOADS]: The skill references official CockroachDB Cloud API endpoints for networking checks. These interactions are consistent with the vendor's own infrastructure and are used solely for retrieving security metadata.
[DATA_EXPOSURE]: The skill examines security configurations such as IP allowlists and HBA settings. It includes instructions to avoid logging secrets and focuses on metadata rather than sensitive application data.

auditing-cloud-cluster-security