All loops
SecurityMedium 11 min· claude-sonnet-4-5
Cloud config auditor
Cloud config auditor with audit-grade logs.
Read the full Security build guide →NOT DEPLOYEDNOT DEPLOYED
0193ms
Trigger
cron(0 7 * * *) fired · every day · 07:00
021033ms
Agent
claude-sonnet-4-5 · in 1333 tok · out 409 tok
03303ms
Tools
aws-mcp/anthropic:messages.create → 200 OK · 273ms
0483ms
Verify
schema check · zod v3 passed
05173ms
Output
github issue opened · SEC-142
0653ms
Notify
audit log written · runbook link attached
SUCCESS
0%
0 runs
P50
0ms
median
P95
0ms
tail
AVG COST
—
per run
LAST OK
never
—
LAST FAIL
never
none
Latency · last 30 runs0 samples
no runs yet
Latest output · what your users see
SEC-1053CWE-798
Public S3 bucket `acme-logs-prod` — no encryption at rest
// press Test to run once · Watch live to keep streaming · Deploy to make it real
The problem
Security tasks are tedious, easy to skip, and dangerous to skip.
The outcome
Tedium is automated; humans review summaries and approve.
Ingredients & skills
Secrets
- ANTHROPIC_API_KEY
Providers
- Anthropic
MCP servers
- aws-mcp
- github-mcp
#security#audit#claude
How it works
Cloud config auditor with audit-grade logs.
Step 1
1 — Read-only scan
All cloud + repo calls are scoped read-only by the locker.
Step 2
2 — Summarise
Claude ranks findings by blast radius, not raw severity.
Step 3
3 — Ticket
Top findings open tickets with owner + suggested fix.
One-line deploy
The button above runs the same command with your saved config. This is the raw CLI form.
bash
npx claudeloops deploy cloud-config-auditor