Skill

implementing-zero-trust-in-cloud

skill:mukul975/anthropic-cybersecurity-skills#implementing-zero-trust-in-cloud

Guides zero trust implementation across AWS, Azure, and GCP per NIST SP 800-207 and BeyondCorp principles, covering identity-centric access, micro-segmentation, continuous verification, device trust assessment, and Identity-Aware Proxy deployment. Use when migrating from perimeter security to identity-centric access, removing VPN dependency, or designing micro-segmentation for multi-cloud workloads.

SkillsMP

Verdict

Suspicious

Risky behavior the analysis could not rule out.

Analyzed Oct 27, 2026, 23:38 UTC at 54a7988

findings

medium

highest severity

threat classes

4,532

files scanned

80/80

checks satisfied

package advisories

Why this verdict

suspicious: finding skill:skills/implementing-zero-trust-in-cloud:skills/implementing-zero-trust-in-cloud/references/api-reference.md:13:SUPPLY

Security findings 1

Supply chain

mediumContextual risklow confidence

The API reference instructs installing the azure-identity and azure-mgmt-authorization packages from PyPI without version pins, so whatever code currently occupies those packages is fetched and executed at install time rather than a reviewed version.

skills/implementing-zero-trust-in-cloud/references/api-reference.md:13

pip install azure-identity azure-mgmt-authorization

vector:instruction

Counter-argument considered

Strongest refutation case fails: the transparent, correct-name install of official Microsoft SDKs from PyPI would only be carved out if pinned, but the command carries no version specifiers, and installing packages is nowhere in the declared description (declared claims are none, per residue R6 and the DET hit). Strongest sustaining case holds: the reference file is reachable skill content and issues a concrete pip install instruction whose latest-version fetch is undeclared, with no mitigation present, so the low-severity contextual-risk finding stands.