Scan the Terraform, CloudFormation, Kubernetes and CI configuration a repository actually contains, decide what each finding means in this environment, and land the result in Noru as security findings — closing the ones that no longer reproduce.
Plugin iac-scan from marketplace noru-grc-engineering in noru-tech/noru-grc-engineering. Commands read from the repo's manifest — 6 days ago.
iac-scanScan a repository's Terraform, CloudFormation, Kubernetes and CI configuration for compliance-relevant misconfiguration, decide with the user what each finding means in their environment, and land the result in Noru as security findings — closing the ones that no longer reproduce. Use when someone a
/iac-scan:diffShow exactly which security findings would be filed in Noru, which would change, and which would be closed. Reads only; writes nothing.
/iac-scan:pushFile the reviewed misconfigurations in Noru as security findings, and close the ones that no longer reproduce. Writes to the customer's system of record — requires explicit confirmation.
/iac-scan:scanAsk Noru what this piece already has open, read the repository's infrastructure and pipeline configuration, and write a reviewable .noru/iac-scan.yml. Writes nothing to Noru.
noruconnects to: https://api.noru.tech/v1/mcp
Run consolidated branch reviews across independently installed GRC pieces, summarize live Noru work requiring attention with read scopes only, and check shared connection and repository context.
1 skill · 5 commands · 1 MCP server
Install, plan, apply, and verify enforceable GitHub merge gates for the GRC Engineering workflow without granting the Noru hub administration rights.
1 skill · 6 commands
Scan a repository for the AI systems, model providers and oversight points it actually contains, review the manifest in a PR, and land it in Noru as assets, vendors and evidence.
1 skill · 3 commands · 1 MCP server
Assemble the evidence bundle, sampling and workpapers an auditor asks for — for one framework over one audit window — from Noru's graph plus the local files an integration cannot reach, and land the tested conclusion for each control back in Noru.
1 skill · 3 commands · 1 MCP server
Who wrote each change, who approved it, who merged it and who deployed it, for one window — with every separation that did not hold owned by a named person, and the forge configuration that was supposed to keep them apart.
1 skill · 3 commands · 1 MCP server
Inventory the coding agents, MCP servers and plugins a repository's development process depends on, decide with the user which organization stands behind each one, and land them in Noru as vendors plus one evidence record for the window — never anything per person.
1 skill · 3 commands · 1 MCP server
ADR lifecycle management — create, index, supersede, and link Architecture Decision Records to code
5 skills · 1 command · 1 agent
Install the "AAS Privacy & Compliance Engineering" workflow plugin from Agentic Awesome Skills.
6 skills
Personalized AWS guidance built on patterns from 350,000+ startups. Get architecture, cost, and security recommendations matched to your stage, from day-one account setup to production-ready infrastructure. Migrate to AWS from Azure, GCP, or Heroku with resource discovery, cost estimates, and generated Terraform. Move OpenAI, Azure OpenAI, and Gemini code to Amazon Bedrock, and plan and prototype AI agents on AgentCore and other AWS runtimes. Includes AWS Activate credits eligibility, 60+ exclusive startup offers, and multi-account, multi-region support. Built by AWS Startup Solutions Architects.
13 skills · 1 command · 7 agents · 1 MCP server
Cloud architecture design for AWS/Azure/GCP/OCI, Kubernetes cluster configuration, Terraform infrastructure-as-code, hybrid cloud networking, and multi-cloud cost optimization
8 skills · 7 agents
Twilio Skills provide procedural knowledge for AI coding agents — which APIs to use, in what order, and what to avoid. Covers SMS, Voice, WhatsApp, Verify, SendGrid, Compliance, and 30+ products.
57 skills · 1 MCP server
14 regulatory affairs & quality management skills for HealthTech/MedTech: ISO 13485 QMS, MDR 2017/745, FDA 510(k)/PMA, GDPR/DSGVO, ISO 27001 ISMS, CAPA management, risk management, clinical evaluation, SOC 2 compliance.
21 skills
This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.