cloud-security

Analyze AWS, Azure, and GCP cloud configurations for misconfigurations and exposure risks.

Updated Apr 16, 2026

Search Tags:#iam #s3 #cloud-security #mitre #cspm #security-group

Ready to run

npx skills add https://github.com/devCharuzu/philfida-taskmanage --skill cloud-security-devcharuzu

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: cloud-security
Source: https://github.com/devCharuzu/philfida-taskmanage/tree/main/.windsurf/skills/cloud-security
Command: npx skills add https://github.com/devCharuzu/philfida-taskmanage --skill cloud-security-devcharuzu

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

Cloud security posture management helps teams systematically identify cloud configuration misconfigurations that create exploitable attack surfaces, such as IAM privilege escalations, public storage exposure, and open network rules.

Core Features & Use Cases

IAM policy analysis to detect privilege escalation paths and over-permissive grants
S3 exposure assessment for public access and encryption safeguards
Security group analysis to identify open ports and internet-facing rules
IaC security review across Terraform, CloudFormation, and Kubernetes manifest checks
Cloud provider coverage with MITRE ATT&CK mappings for proactive defense

Quick Start

Run a quick posture check against your IAM policies, S3 bucket configurations, and security group rules to surface high-priority findings.

Frequently Asked Questions about cloud-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

What is cloud security posture management and how does it detect IAM privilege escalation?▼

Cloud security posture management analyzes IAM policies to detect privilege escalation paths and over-permissive grants. It requires read access to your configurations and outputs structured findings with MITRE ATT&CK mappings for proactive defense.

How do I check S3 bucket exposure and public access misconfigurations?▼

To check S3 bucket exposure, the Skill analyzes bucket configurations for public access settings and encryption safeguards. It identifies misconfigurations that create exploitable attack surfaces and outputs structured findings detailing the exposure risks.

Does this cloud security posture tool work with AWS, Azure, and GCP configurations?▼

Yes, the cloud security posture management tool applies across AWS, Azure, and GCP. It detects IAM privilege escalation, S3 exposure, and network security group misconfigurations in real-world deployments across all three providers.

Can I review Terraform and Kubernetes manifests for security misconfigurations?▼

Yes, you can review Infrastructure as Code security across Terraform, CloudFormation, and Kubernetes manifest checks. The analysis identifies open network rules and configuration risks before real-world deployment by leveraging IaC checks.

How do I identify open ports and internet-facing security group rules?▼

Security group analysis identifies open ports and internet-facing rules by reading your network security group configurations. It surfaces high-priority findings related to network misconfigurations that expose your cloud attack surface.

What are the limitations of cloud security posture management for IaC checks?▼

Cloud security posture management requires read access to IAM policies, bucket configurations, and security group rules. It focuses on configuration analysis and IaC checks, meaning it cannot detect runtime threats or exploit active vulnerabilities.