IAC Audit Pack

Install

Works with Claude Code, VS Code, Cursor, Windsurf. Read the repository before you give any tool access to your data.

npx agentmarket install connector/unbearabledev-iac-audit-pack

About

No reviews yet. Installed it? Reviews come from verified installers only. How reviews work

Permissions

What this server can do and what it asks for, from its tool list and install config. Checked Oct 25, 2026.

Tools

17 read · 0 write · 0 delete · 1 not yet classified

Secrets

1 (API keys, tokens or passwords)

Install scripts

Nothing to install (hosted)

Runs as

Hosted (remote endpoint)

Tools (18)

Read from the source code; the running server may differ. Descriptions are the server’s own words; hidden characters are shown as [U+…].

• audit_allread-only

  Detect file types and run the appropriate audit on each, returning a combined report. Detects: docker-compose.yml (compose audit), Dockerfile (dockerfile audit), .github/workflows/*.yml (GHA audit). Runs all applicable audits and merges findings into a single response envelope. Args: files: Dict mapping filename -> file content (string). e.g. {"docker-compose.yml": "...", "Dockerfile": "..."} min_severity: Drop findings below this severity across all audits. Default low.

• audit_composeread-only

  Run the full security audit against a docker-compose.yml. Provide exactly one of `compose_yaml` (paste the YAML) or `compose_url` (public HTTPS URL — e.g. a GitHub raw URL). Returns findings grouped by category, each with severity, description, remediation, and a YAML fix snippet. Args: compose_yaml: The docker-compose.yml content as a string. compose_url: HTTPS URL to fetch the compose file from (5s timeout, 1MB cap). min_severity: Drop findings below this severity. One of: 'info', 'low', 'medium', 'high'. Defaults to 'low'.

• audit_dockerfileread-only

  Run the full security & quality audit against a Dockerfile. Provide exactly one of `dockerfile_content` (paste the Dockerfile) or `dockerfile_url` (public HTTPS URL — GitHub raw, gist, etc.). Returns findings with severity, line number, remediation, and a fix snippet. Args: dockerfile_content: The Dockerfile content as a string. dockerfile_url: HTTPS URL to fetch the Dockerfile from (5s timeout, 200KB cap). min_severity: Drop findings below this severity. One of 'info', 'low', 'medium', 'high'. Default 'low'.

• audit_github_actionsread-only

  Run the full security audit against a GitHub Actions workflow file. Provide exactly one of workflow_yaml (paste the YAML) or workflow_url (public HTTPS URL to a .github/workflows/*.yml file). Returns 13 checks across 5 categories covering supply-chain, token leaks, permissions, and script injection. Args: workflow_yaml: The workflow YAML content as a string. workflow_url: HTTPS URL to a workflow file (5s timeout, 500KB cap). min_severity: Drop findings below this severity. Default low.

• audit_kubernetesread-only

  Run the full security and quality audit against Kubernetes manifests (YAML). Provide exactly one of manifest_content (paste the YAML, may include multiple documents separated by ---) or manifest_url (public HTTPS URL). Returns 66 checks across 7 categories: security, resources, availability, network, rbac, images, config. Args: manifest_content: The full YAML content of one or more Kubernetes resources. manifest_url: HTTPS URL to a manifest file (5s timeout, 2MB cap). min_severity: Drop findings below this severity. Default low.

• audit_workflow

  Run the full security audit against a GitHub Actions workflow. Provide exactly one of `workflow_yaml` (paste the YAML content) or `workflow_url` (HTTPS URL — e.g. a GitHub raw URL to a single `.github/workflows/*.yml` file). Returns findings with severity, affected job/step, remediation text, and a YAML fix snippet. Args: workflow_yaml: The workflow YAML content as a string. workflow_url: HTTPS URL to a workflow file (5s timeout, 500KB cap). min_severity: Drop findings below this severity. One of 'info', 'low', 'medium', 'high'. Default 'low'.

• budapest_district_lookupread-only

  Return Budapest postcodes for a district (I-XXIII or 1-23). Args: district_number: District as int (1-23) or roman numeral string (X, XIV).

• list_all_checksread-only

  List every check across all four audit packages (compose, dockerfile, GHA, kubernetes). Returns the full check catalog with source package, id, category, severity, and title.

• list_checks

  List the full catalog of available checks. Args: category: If provided, return only checks in that category. Otherwise return all.

• list_checks_composeread-only

  List the full catalog of docker-compose audit checks (25 checks, 9 categories). Args: category: If provided, return only checks in that category.

• list_checks_dockerfileread-only

  List the full catalog of Dockerfile audit checks (18 checks, 5 categories). Args: category: If provided, return only checks in that category.

• list_checks_github_actionsread-only

  List the full catalog of GitHub Actions audit checks (13 checks, 5 categories). Args: category: If provided, return only checks in that category.

• list_checks_kubernetesread-only

  List the full catalog of Kubernetes audit checks (66 checks, 7 categories). Categories: security, resources, availability, network, rbac, images, config. Args: category: If provided, return only checks in that category.

• list_postcodes_in_countyread-only

  List all postcodes in a given Hungarian county (varmegye). Args: county_name: County name, e.g. Pest, Csongrad-Csanad, Budapest.

• lookup_cityread-only

  Return all postcodes for a Hungarian city/settlement (diacritic-insensitive). Args: city: Hungarian settlement name (e.g. Szeged, Gyor, Budapest).

Signals

Stars

0

Forks

0

Open issues

0

Last commit

Jun 4, 2026 (4 months ago)

Last release

Jun 10, 2026 (4 months ago)

From GitHub (fetched Oct 24, 2026).

Details

Registry name

io.github.UnbearableDev/iac-audit-pack

Version

1.0.1

Auth

Bearer token

License

License unknown

Repository

github.com/UnbearableDev/iac-audit-pack

First seen

Oct 24, 2026

Last checked

Oct 24, 2026

Source

Official MCP Registrygithub-graphql