cloud-storage-exposure

Audit AWS, GCP, and Azure storage bucket access controls and security configurations.

Updated Jul 30, 2026

Search Tags:#security #audit #compliance #cloud #s3 #pentest

Ready to run

npx skills add https://github.com/salmanabdurrahman/pi-pentest-agent --skill cloud-storage-exposure

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: cloud-storage-exposure
Source: https://github.com/salmanabdurrahman/pi-pentest-agent/tree/main/skills/cloud-storage-exposure
Command: npx skills add https://github.com/salmanabdurrahman/pi-pentest-agent --skill cloud-storage-exposure

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill addresses the critical risk of misconfigured cloud storage buckets by providing a structured, safe, and non-destructive method to identify public access and security hygiene gaps.

Core Features & Use Cases

Metadata-Level Auditing: Validates access controls and bucket policies using only HEAD and listing requests, ensuring no sensitive data is downloaded or exposed.
Security Hygiene Review: Checks for essential protections like versioning, MFA delete, access logging, and encryption status.
Use Case: A security engineer needs to verify that a set of S3 buckets and GCP containers are not publicly readable and follow organizational security policies without manually checking each console.

Quick Start

Use the cloud-storage-exposure skill to audit the storage buckets defined in the provided scope file for public access and configuration compliance.

Frequently Asked Questions about cloud-storage-exposure

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I audit cloud storage buckets for public exposure without downloading data?▼

You can audit cloud storage buckets for public exposure using metadata-level checks. This method performs HEAD and listing requests to validate access controls and security configurations without accessing or downloading sensitive object contents.

Can I check S3 bucket security configurations across AWS, GCP, and Azure simultaneously?▼

Yes, you can validate cloud storage bucket access controls across AWS, GCP, and Azure environments simultaneously. The audit checks for public exposure, missing logging, and weak encryption settings within a single defined scope.

What is metadata-level auditing for cloud storage security and how does it work?▼

Metadata-level auditing validates access controls and bucket policies using only HEAD and listing requests. This ensures no sensitive data is downloaded, while still identifying public access and security hygiene gaps like missing versioning or MFA delete.

What's the best way to verify security hygiene like encryption and access logging for cloud storage?▼

The best way to verify security hygiene for cloud storage is an automated audit that checks for essential protections like versioning, MFA delete, access logging, and encryption status. This ensures compliance with organizational security policies without manual console checks.

Do I need authorized cloud credentials to perform a cloud storage exposure audit?▼

Yes, you need authorized cloud credentials and a defined scope of target storage resources to perform an exposure audit. This ensures the security validation remains non-destructive and compliant with organizational security policies.