What a cloud review actually checks
A review can only talk about the file in front of it. This is what that file is expected to contain, and what a finding does not prove.
The check looks at text you already have
SkaleAgents review checks read infrastructure text: Terraform, CloudFormation, Kubernetes, a Dockerfile, Compose, a workflow. They do not log into the account. If the risky setting is only in the console, the check cannot see it.
A finding means the text contains the pattern. It does not mean the account is safe. No finding does not prove the setting is absent outside that file.
Use a checklist when you are not ready to submit a job
The free resources are the same questions, written so you can run them in the assistant you already use. I use the container privilege review on a manifest before it goes to a cluster.
When you want those questions saved on a job, the review checks page lists what each check looks for.