Assess AWS, Azure, and GCP security posture with ScoutSuite and Prowler audits.
npx skills add https://github.com/woohyun212/security-skill --skill cloud-pentest
Please help me install this Agent Skill. Skill: cloud-pentest Source: https://github.com/woohyun212/security-skill/tree/main/cloud-pentest Command: npx skills add https://github.com/woohyun212/security-skill --skill cloud-pentest
Provides a structured, repeatable way to assess cloud security posture across multiple providers, removing manual checklist work and consolidating findings for remediation planning.
Run the cloud-pentest skill to perform ScoutSuite and Prowler audits, analyze IAM/storage/network posture, and generate a consolidated findings report for a specified authorized cloud account.
High-intent search queries and answers about installing and using this skill.
Multi-cloud security posture audits automate CSPM by running ScoutSuite and Prowler to collect CIS findings across AWS, Azure, and GCP. This removes manual checklist work and consolidates results into a structured report for remediation planning.
IAM privilege escalation analysis enumerates roles and policies to identify over-permissive grants in authorized cloud environments. It highlights risky privilege chains and documents them with actionable evidence for security teams to review.
Cloud storage exposure and network posture checks review public buckets, NSGs, security groups, NACLs, and firewall rules. They combine automated scans with targeted CLI queries to produce actionable evidence of misconfigurations.
Yes, valid provider credentials and installed CLIs for AWS, Azure, or GCP are required to run ScoutSuite and Prowler audits. The skill uses these local tools to authenticate and gather security posture findings.
Yes, consolidated findings reports include example IaC remediation suggestions for detected CIS violations. The report provides attack narratives and specific guidance to fix over-permissive cloud configurations.
balsm-healthAutomate continuous security posture monitoring across AWS, Azure, and GCP.
haJ1tAudits cloud security posture across multiple dimensions including workloads, clients, and servers.
0x0pointerAssesses AWS, Azure, and GCP infrastructure for misconfigurations, exposure, and compliance gaps.
coreymayprayAudit AWS, Azure, and GCP cloud security posture against CIS benchmarks.
