Hub
cloud-posture-review
Two roles, one pipeline and one skill for read-only cloud posture and IAM review, where a check that could not run is NOT-CHECKED with its reason rather than a PASS.
Install
Staged first, the resolved commit pinned in .arcturn-install.json, then linked into the roots Arcturn scans. Nothing is linked before the pin.
To see the table below derived from the package itself rather than from this entry, run arcturn inspect sitharaj88/arcturn/kits/cloud-posture-review — it stages exactly as an install would, links nothing, and prints what it would add.
Source
- Maintainer
- Sitharaj Seenivasan
- Contents
- 2 roles · 1 workflow · 1 skill
Usage
What you would type
Every command this package adds, in the form you would run it. A slash command is invoked by its own name; a pipeline goes through /workflow.
Disclosure
What this would add to your machine
Read in the same vocabulary the installer uses: derived lanes, declared tools, stage counts, budgets, and whether any of it is executable code.
Agent roles
2
A role’s lane is derived from the tools it declares — from what it can do, never from what its description claims about itself.
iam-least-privilege-analyst
Laneexec
Tools
readgrepgloblsbashposture-scanner
Laneexec
Tools
readgrepgloblsbash
| Role | Lane | Tools |
|---|---|---|
| iam-least-privilege-analyst | exec | readgrepgloblsbash |
| posture-scanner | exec | readgrepgloblsbash |
- exec
- Isolated worktree so it can run things; its diff is always discarded.
Workflows
1
A workflow spends money. The budget is the file’s own ceiling, enforced by the engine — the run aborts when the total reaches it.
posture-review
Stages5
Budget$20
| Workflow | Stages | Budget |
|---|---|---|
| posture-review | 5 | $20 |
Skills
1
- /exposure-check
No executable code disclosed
This entry declares no extensions/. Verify it against the package itself with arcturn inspect — and note that the installer would confirm-gate executable code either way, whatever a listing says.