Vanta
Pulls Vanta's per-test remediation context, then fixes the failing control in the repository's IaC.
Install
OfficialClaude Code: /plugin marketplace add anthropics/claude-plugins-official → /plugin install vanta@claude-plugins-official
Vanta'da başarısız bir uyumluluk testini kapatırken ya da altyapı kodundaki denetim bulgusunu düzeltirken
- Author
- Vanta
- License
- MIT
Three skills list failing tests, open one, and write the fix. The instruction shaping all of them is to fetch the test-specific remediation prompt before proposing anything — that context beats a model's general recollection of SOC 2 or ISO 27001 controls, and skipping it is exactly how plausible but wrong CloudTrail or KMS advice gets written into a pull request. Fixes are scoped to the failing entity and applied to matching Terraform, CloudFormation or CDK files with no surrounding cleanup, and the PR carries a Fixes line with the test URL so the check is re-run and the remediation is tracked. Two guardrails are explicit: never weaken a security setting to make a test pass, and state the cost when a fix switches on a billed service.
Similar skills
Codebase Cleanup
SkillPairs debt scan, refactor and dependency audit with a test agent that covers the code first.
Performance Testing Review
SkillPairs a performance engineer and a test automator behind a review that picks its own reviewers.
Error Handling Patterns
SkillDecides which failures are values and which are exceptions.
Comments(0)
Sign in to comment