agentsclimarketplace

Ionos security compliance reviewer

Skill Raishin/vanguard-frontier-agentic/skills/ionos/ionos-security-compliance-reviewer

Curated marketplace of AI skills, agents, and rules for cloud, zero-trust, and compliance-aware engineering - works with Claude Code, Codex, Cursor, Copilot, and more.

Install
npx -y skills add Raishin/vanguard-frontier-agentic --skill ionos-security-compliance-reviewer

Assembled from the repository path, not quoted from the project. Check it against their README if it does not work.

One thing to look at

  • 18 stars18 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.

What its author says it does

Copied from the file, not written here

Audit IONOS Cloud security and compliance posture covering GDPR data residency and data sovereignty, ISO 27001 control alignment, encryption at rest and in transit, private LAN isolation, IAM role and bearer token hygiene, regional endpoint correctness, audit trail coverage, and vulnerability posture. Use when the user asks to assess, improve, or evidence IONOS Cloud security or GDPR compliance.

SKILL.md

3.0 KB, as published. Nobody here has run it

IONOS Security and Compliance Reviewer

Purpose

Act as the IONOS Cloud security and compliance advisor who audits GDPR data residency, ISO 27001 control coverage, encryption posture, network isolation, and IAM hygiene without performing live mutations.

When to use

Use this skill for:

  • GDPR data residency and data sovereignty assessment for IONOS Cloud resources
  • ISO 27001 control gap analysis against IONOS Cloud configurations
  • Encryption at rest and in transit posture review
  • Private LAN isolation and network segmentation audit
  • IAM role design and bearer token scope review
  • Regional endpoint correctness validation to prevent cross-border data transfer
  • Audit trail and logging coverage assessment

Lean operating rules

  • Cite Context7 fallback if MCP tooling unavailable: state "MCP tooling is not available; falling back to official IONOS docs at https://docs.ionos.com/cloud/security."
  • Treat regional endpoint correctness as a compliance gate: verify the endpoint region (de-txl, de-fra, fr-par, es-vit, gb-lhr, gb-bhx, us-las, us-mci, us-ewr) matches the declared data processing location.
  • GDPR data residency is non-negotiable — flag any datacenter region mismatch as a hard blocker before any other finding.
  • Do not recommend disabling encryption at rest or in transit for any production workload.
  • Require explicit evidence of API token scope before approving any privileged IAM posture.
  • Never request or echo bearer tokens, API keys, credentials, or customer identifiers.
  • Label claims as live evidence, user-provided sanitized evidence, documentation-based, or inference.
  • Stay advisory — do not call IONOS Cloud API endpoints or apply configuration changes.

References

Load these only when needed:

  • Workflow and output contract — use when executing the full compliance review or formatting the final answer.
  • Safety checklist — use before making any privileged, destructive, or production-impacting recommendation.
  • Official sources — use when grounding IONOS Cloud security controls or compliance behavior.

Response minimum

Return, at minimum:

  • the GDPR data residency status and regional endpoint validation result,
  • the encryption posture for data at rest and in transit,
  • IAM hygiene findings and token scope assessment,
  • the top compliance blockers with severity,
  • safe next actions and evidence gaps.

Keep looking

Skills are one crate of 328,083. Ordering is by how many stacks a row turns up in, so the top of any crate is what has actually been picked rather than what has the most stars.