cloud-containers

Assess cloud and container environments for security misconfigurations and exploitation paths.

Updated May 27, 2026
One-click install
npx skills add https://github.com/hoanghn61/.agents --skill cloud-containers-hoanghn61
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: cloud-containers
Source: https://github.com/hoanghn61/.agents/tree/main/skills/cloud-containers
Command: npx skills add https://github.com/hoanghn61/.agents --skill cloud-containers-hoanghn61

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

It helps you identify security misconfigurations and exploitation paths across cloud infrastructure and container platforms so sensitive data and high-impact weaknesses don’t go unnoticed.

Core Features & Use Cases

  • Cloud misconfiguration testing: Assess AWS, Azure, and GCP for exposed storage, IAM/RBAC flaws, metadata service weaknesses, and privilege escalation opportunities.
  • Container security validation: Evaluate Docker and Kubernetes for privileged execution, socket exposure, image vulnerabilities, RBAC bypasses, secret exposure, and host escape conditions.
  • Evidence-driven reporting workflow: Guide structured enumeration and documentation so findings include platform-specific evidence you can act on quickly.
  • Use case: During a security assessment of a mixed environment, use this skill to enumerate misconfigurations, test access controls, probe storage/secrets exposure, and produce actionable notes for remediation across AWS/Azure/GCP plus Docker/Kubernetes.

Quick Start

Use cloud-containers to test your environment’s cloud services and container configurations for common exposure and privilege escalation paths, focusing on IAM/RBAC, storage/secrets, and container isolation.

Frequently Asked Questions about cloud-containers

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I test Kubernetes RBAC for privilege escalation paths?

To test Kubernetes RBAC for privilege escalation, enumerate role bindings and validate access controls to identify bypass opportunities and misconfigured permissions. This skill automates that RBAC validation to expose escalation paths.

What is the best way to check AWS IAM for misconfigurations and exposed storage?

The best way to check AWS IAM for misconfigurations is validating access control policies and inspecting storage buckets for public exposure. This skill assesses AWS environments to identify IAM flaws and exposed storage resources.

How do I validate Docker container isolation and prevent host escape?

To validate Docker container isolation and prevent host escape, check for privileged execution, socket exposure, and unsafe capabilities. This skill evaluates Docker configurations to detect isolation failures and host escape conditions.

Can I use this to find exposed secrets and cloud metadata service weaknesses?

Yes, you can find exposed secrets and cloud metadata service weaknesses by inspecting storage and probing endpoint access. This skill targets cloud and container threat patterns including metadata and credential exposure validation.

Does this security testing workflow generate evidence for remediation?

Yes, this security testing workflow generates evidence for remediation through structured enumeration and documentation. It provides platform-specific evidence of findings so you can act on misconfigurations quickly.