← All skills
saas-security-posture
80 / 100 · Low risk
Fine to try. Some of what it can do is expected: a devops skill usually runs commands, installs tools and uses cloud credentials.
By BagelHole/DevOps-Security-Agent-Skills (GitHub) · devops · 1,197 stars · scanned at commit 0365f57
Audit and harden your SaaS tool stack — enforce SSO, review OAuth grants, manage shadow IT, and secure admin accounts across Slack, GitHub, Google Workspace, and AWS. Use when tightening security across company SaaS tools.
Works with any agent that supports SKILL.md skills.
What this skill can do
Runs commands on your computer
The author does not mention this. Expected for a devops skill.
Found in 17 places.
Show 14 more
- infrastructure/it/saas-security-posture/SKILL.md, line 50
aws iam generate-credential-report - infrastructure/it/saas-security-posture/SKILL.md, line 82
gh api -X PATCH /orgs/{ORG} -f two_factor_requirement_enabled=true - infrastructure/it/saas-security-posture/SKILL.md, line 128
curl -s -X POST -H "Authorization: Bearer ${SLACK_ADMIN_TOKEN}" \ - infrastructure/it/saas-security-posture/SKILL.md, line 162
gam update org "/" settings 2sv enforced - infrastructure/it/saas-security-posture/SKILL.md, line 193
aws iam get-account-summary --query 'SummaryMap.AccountMFAEnabled' - infrastructure/it/saas-security-posture/SKILL.md, line 219
aws organizations create-policy --name "DenyRootActions" \ - infrastructure/it/saas-security-posture/SKILL.md, line 238
gam all users show tokens | grep -E "(drive|gmail|admin)" > high_risk_oauth.txt - infrastructure/it/saas-security-posture/SKILL.md, line 248
gam user compromised@company.com delete token clientid APP_CLIENT_ID # single app - infrastructure/it/saas-security-posture/SKILL.md, line 273
gam create user admin-jdoe@company.com firstname "John (Admin)" lastname "Doe" \ - infrastructure/it/saas-security-posture/SKILL.md, line 309
gam update org "/" settings drive sharing_outside_domain off - infrastructure/it/saas-security-posture/SKILL.md, line 337
SHADOW_IT_DOMAINS=("airtable.com" "notion.so" "trello.com" "asana.com" - infrastructure/it/saas-security-posture/SKILL.md, line 349
gam report login parameters app_name \ - infrastructure/it/saas-security-posture/SKILL.md, line 357
awk '{print $7}' /var/log/squid/access.log | sed 's|https\?://||;s|/.*||' \ - infrastructure/it/saas-security-posture/SKILL.md, line 366
cat <<'SCRIPT' > /usr/local/bin/shadow-it-check.sh
Connects to the internet
The author does not mention this. Expected for a devops skill.
Found in 9 places.
Show 6 more
Changes files outside its own folder
The author does not mention this.
Found in 2 places.
Install
Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.
if [ -e ~/.agents/skills/'saas-security-posture' ] || [ -L ~/.agents/skills/'saas-security-posture' ]; then echo 'A skill folder named saas-security-posture already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/BagelHole/DevOps-Security-Agent-Skills' "$d" && git -C "$d" checkout --quiet '0365f57a079b1332f95cf26e31dd2d5332a8399f' -- 'infrastructure/it/saas-security-posture' && mkdir -p ~/.agents/skills && cp -R "$d"/'infrastructure/it/saas-security-posture' ~/.agents/skills/'saas-security-posture' && rm -rf "$d"; fi
Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'saas-security-posture' ~/.claude/skills/'saas-security-posture' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.
Badge for your README
The badge for BagelHole/DevOps-Security-Agent-Skills shows the score of its lowest-scoring skill.
[](https://zalavijaysinh.github.io/skilltrust/repos/BagelHole/DevOps-Security-Agent-Skills/)
Score history
| Date | Version | Score |
|---|
| 2026-11-08 | 0365f57 | 80 |
| 2026-11-06 | 0365f57 | 70 |