wiz-automation

Wiz Automation Skill – Implementing DevSecOps Workflows via Rube MCP

Skill Overview

wiz-automation is a Claude skill that uses Rube MCP (Composio) to automate operations on the Wiz cloud security platform, including batch processing of security scans, vulnerability management, and compliance reports.

Applicable Scenarios

1. Cloud Security Scan Automation

Automatically run Wiz security scans on a regular basis, monitor cloud infrastructure vulnerabilities, and integrate the results into DevSecOps workflows without manual initiation.

2. Vulnerability Management Workflows

Automatically process vulnerabilities detected by the Wiz platform in batches, including status updates, prioritization, and report generation, significantly improving the security team’s response efficiency.

3. DevSecOps Integration

Integrate Wiz security checks into CI/CD pipelines to enable automated security validation before code deployment, connecting seamlessly to the Wiz toolkit through Rube MCP.

Core Features

1. Dynamic Tool Discovery

Always retrieve the latest Wiz toolkit schema through RUBE_SEARCH_TOOLS, avoiding hard-coded, outdated tool definitions and ensuring synchronization with changes to the Wiz platform API.

2. Connection Management and Session Reuse

Use RUBE_MANAGE_CONNECTIONS to manage Wiz connection status and reuse the session ID within the same workflow, reducing repeated authentication overhead and improving batch operation performance.

3. Batch Operations and Execution

Use RUBE_MULTI_EXECUTE_TOOL or RUBE_REMOTE_WORKBENCH to execute Wiz operations in batches, with pagination support for processing large-scale data, making it suitable for enterprise security and compliance scenarios.

Frequently Asked Questions

How is the wiz-automation skill configured?

Simply add the Rube MCP server endpoint https://rube.app/mcp to the Claude client configuration; no API key is required. When using it for the first time, activate the Wiz toolkit connection through RUBE_MANAGE_CONNECTIONS. Once the status is confirmed as ACTIVE, automated operations can begin.

Why must RUBE_SEARCH_TOOLS be called first?

The Wiz toolkit’s tool schema is frequently updated, and hard-coded tool definitions can cause execution failures. RUBE_SEARCH_TOOLS returns the currently available tool slugs, input schemas, and execution plans, ensuring that automation scripts remain compatible with the platform.

How should large-scale security data be handled?

wiz-automation supports paginated retrieval and batch execution modes. Use RUBE_MULTI_EXECUTE_TOOL to execute multiple operations within a single session, check the pagination tokens in the responses, and continue retrieving data until all data has been fully processed. For extremely large-scale tasks, use run_composio_tool() in RUBE_REMOTE_WORKBENCH for distributed processing.