skills.rest
cmndcntrlcyber
cmndcntrlcyberCOMMUNITY
Explore all skills by this author →
GitHub

hunt-cloud-misconfig

Scan AWS, GCP, Azure, and Kubernetes for cloud misconfigurations.

3|Updated Nov 12, 2025
Search Tags:#Kubernetes#AWS#Azure#GCP#cloud security#misconfiguration detection
One-click install
npx skills add https://github.com/cmndcntrlcyber/rtpi --skill hunt-cloud-misconfig-cmndcntrlcyber
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: hunt-cloud-misconfig
Source: https://github.com/cmndcntrlcyber/rtpi/tree/main/knowledge_seed/bug_hunter_skills/hunt-cloud-misconfig
Command: npx skills add https://github.com/cmndcntrlcyber/rtpi --skill hunt-cloud-misconfig-cmndcntrlcyber

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill unit identifies and validates potential security misconfigurations in cloud services, aiding in security audits and hardening cloud infrastructures.

Core Features & Use Cases

  • Cloud Security Auditing: Scans for misconfigurations in AWS, GCP, Azure, and Kubernetes.
  • Misconfiguration Detection: Identifies publicly accessible buckets, exposed services, and IAM credential leaks.
  • Local Verification: Allows local testing with AWS simulators for real-world scenario validation.
  • Use Case: A security auditor uses this Skill to identify potential vulnerabilities in an AWS environment, such as public S3 buckets or exposed Lambda functions.

Quick Start

Run the hunt-cloud-misconfig skill to scan your cloud infrastructure for misconfigurations.

Frequently Asked Questions about hunt-cloud-misconfig

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I detect cloud misconfigurations across AWS, Azure, and GCP?▼

To detect cloud misconfigurations across AWS, Azure, and GCP, you can scan your infrastructure for publicly accessible buckets, exposed services, and IAM credential leaks to validate security vulnerabilities.

Can I test for Kubernetes misconfigurations and exposed services locally?▼

Yes, you can test for Kubernetes misconfigurations and exposed services locally by using AWS simulators to validate real-world scenarios and identify potential security vulnerabilities before deployment.

What is the best way to audit public S3 buckets and IAM leaks?▼

The best way to audit public S3 buckets and IAM leaks is to run a comprehensive cloud security scan that identifies and validates misconfigurations across your AWS environment.

Does cloud misconfiguration detection work for multi-cloud environments?▼

Yes, cloud misconfiguration detection works for multi-cloud environments by providing detailed scanning capabilities across AWS, GCP, Azure, and Kubernetes infrastructures to identify exposed services.

How do I validate cloud security findings without affecting production?▼

You can validate cloud security findings without affecting production by using local testing capabilities with AWS simulators to safely verify misconfigurations and exposed services.

What types of IAM credential leaks can be identified during a cloud security audit?▼

During a cloud security audit, the system identifies IAM credential leaks and validates potential security misconfigurations in cloud services to help harden your infrastructure.

Related Skills

devendrapratapsinghdevendrapratapsingh
1

platform-security

Audit container images, Kubernetes configurations, cloud environments, and infrastructure as code for security vulnerabilities.

Community
Advanced
vladm3105vladm3105
16

security-audit

Identify security vulnerabilities across code, dependencies, infrastructure, and configurations.

Community
Advanced
gke-labsgke-labs
42

gke-backup-dr

Configure and manage Backup for GKE resources with gcloud CLI.

Official
Intermediate
DCx7C5DCx7C5

cloud-SKILL.md

Aggregate cloud misconfigurations from AWS Security Hub, Azure Defender, and open-source tools.

Community
Advanced