orcasecurity
10 skills with substantive source documentation and an official publisher or observed installation demand. Read each skill’s original documentation through its card.
orcasecurityorca-cloud-cost-optimizer
Cloud cost optimization analysis using Orca Security asset data. Discovers all cloud assets (AWS, GCP, Azure) through Orca MCP tools, compares current configurations against cheaper alternatives using live public pricing, and produces a prioritized cost reduction report with exact asset evidence. Use when the user asks about cloud cost optimization, reducing cloud spend, rightsizing instances, saving money on cloud infrastructure, cost reduction opportunities, unused resources, oversized VMs, re
- instalações
- 1
- GitHub Stars
- 55
- Atualizado
- 15 de out.
orcasecurityorca-compliance-gap
Deep-dive compliance gap analysis for any framework — failing controls ranked by impact, quick wins, account breakdown, and remediation plan. Use when user asks about compliance gaps, failures, or status (e.g., "compliance gaps", "PCI DSS status", "where are we failing", "SOC 2 compliance", "quick wins").
- instalações
- 1
- GitHub Stars
- 55
- Atualizado
- 15 de out.
orcasecurityorca-config-origin
Traces any Orca alert back to who deployed it, what tool was used, what introduced the issue, and a full timeline of events. Use when user asks about origin, deployment, or ownership of an alert (e.g., "who created this", "where did this come from", "trace back orca-3380725", "who deployed", "what tool was used").
- instalações
- 1
- GitHub Stars
- 55
- Atualizado
- 15 de out.
orcasecurityorca-cve-blast-radius
CVE blast-radius analysis — given a single CVE-ID, find every affected asset across all accounts, rank by real exposure (internet-facing, attack-path participant, crown jewel) instead of static CVSS. Use when user asks about a specific CVE's environmental impact (e.g., "blast radius of CVE-2024-1234", "where are we affected by Log4Shell", "which assets have CVE-2021-44228", "who is exposed to CVE-XXXX").
- instalações
- 1
- GitHub Stars
- 55
- Atualizado
- 15 de out.
orcasecurityorca-identity-review
Analyzes any cloud identity for overprivileged access, actual usage patterns, lateral movement risk, and least-privilege recommendations. Use when user asks about identity permissions, overprivileged access, or IAM review (e.g., "identity review for anika", "is this role overprivileged", "review permissions", "IAM analysis").
- instalações
- 1
- GitHub Stars
- 55
- Atualizado
- 15 de out.
orcasecurityorca-impact-analysis
Analyzes the full impact of fixing an Orca alert — what closes, what breaks, and what the environment looks like after the fix. Use when user asks about impact, consequences, or blast radius of fixing an alert (e.g., "what's the impact of fixing orca-3380725", "if I fix this what breaks", "what else closes").
- instalações
- 1
- GitHub Stars
- 55
- Atualizado
- 15 de out.
orcasecurityorca-inactive-identities-cleanup
Inactive-identity cleanup - finds inactive identities (users, groups, and non-human identities) across an account, business unit, or tag in every cloud provider Orca supports (AWS, Azure incl. Entra ID, GCP incl. Google Workspace, Alibaba Cloud, OCI, Tencent Cloud), ranks them by identity risk score (highest risk first), and drives remediation through a non-destructive path (disable) or a destructive path (delete) that always requires explicit confirmation. Asks for the inactivity time frame (e.
- instalações
- 1
- GitHub Stars
- 55
- Atualizado
- 15 de out.
orcasecurityorca-k8s-connector-troubleshoot
Diagnoses Kubernetes Connector (K8s Tunnel Client / Helm chart orca-tunnel) install and connectivity failures from raw customer input — error text, helm status, kubectl describe, or pod logs — and walks through step-by-step remediation. Use when a user reports the K8s Connector won't install, won't connect, keeps disconnecting, or the cluster shows connected but no scan data appears.
- instalações
- 1
- GitHub Stars
- 55
- Atualizado
- 15 de out.
orcasecurityorca-mfa-enforcement
Finds users who can sign in without MFA across an account, business unit, or tag, ranks them by identity risk, and drives guided enrollment or gated enforcement. Use for MFA or 2FA gaps, root-account MFA, and MFA coverage evidence for an audit.
- instalações
- 1
- GitHub Stars
- 55
- Atualizado
- 15 de out.
orcasecurityorca-morning-briefing
Daily security briefing summarizing new critical alerts, attack paths, compliance drift, exposure changes, and aging unactioned alerts from the last 24-72 hours. Use when user asks for a briefing, summary, or overview (e.g., "morning briefing", "what happened", "security summary", "daily report", "what needs attention").
- instalações
- 1
- GitHub Stars
- 55
- Atualizado
- 15 de out.