skills.rest
cybersecwoman
cybersecwomanCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

hunt-cloud-misconfig

Identify and validate cloud infrastructure misconfigurations across AWS, GCP, Azure, and Kubernetes.

5|Updated May 27, 2026
Search Tags:#Kubernetes#AWS#Azure#GCP#cloud security#misconfiguration detection
One-click install
npx skills add https://github.com/cybersecwoman/Kiro-BugHunter --skill hunt-cloud-misconfig-cybersecwoman
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: hunt-cloud-misconfig
Source: https://github.com/cybersecwoman/Kiro-BugHunter/tree/main/skills/hunt-cloud-misconfig
Command: npx skills add https://github.com/cybersecwoman/Kiro-BugHunter --skill hunt-cloud-misconfig-cybersecwoman

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires curl, awscli, localstack, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill identifies and validates misconfigurations in cloud infrastructure, such as public S3 buckets, exposed Lambda functions, and IAM credential leaks, helping to secure cloud environments.

Core Features & Use Cases

  • Cloud Infrastructure Scan: Identifies misconfigurations in AWS, GCP, Azure, and Kubernetes environments.
  • Misconfiguration Validation: Verifies the presence of actual misconfigurations, such as public S3 buckets with permissive policies.
  • Use Case: Use this Skill to scan a cloud environment for misconfigurations that could lead to data breaches or unauthorized access.

Quick Start

Run the 'hunt-cloud-misconfig' skill to scan your cloud infrastructure for misconfigurations.

Frequently Asked Questions about hunt-cloud-misconfig

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my cloud infrastructure for misconfigurations like public S3 buckets?▼

You can detect IAM credential leaks by running a cloud infrastructure scan that checks for exposed authentication tokens and validates misconfigurations across your AWS, GCP, Azure, and Kubernetes environments.

How do I validate if my S3 bucket policies are publicly exposed?▼

To validate exposed S3 bucket policies, the skill verifies the presence of actual misconfigurations by checking if buckets have overly permissive public access settings, confirming whether unauthorized access is possible.

Do I need LocalStack installed to test for AWS misconfigurations locally?▼

Yes, you need LocalStack along with curl and awscli installed to locally test and validate AWS infrastructure misconfigurations without interacting with your live production cloud environment.

Can I detect Kubernetes misconfigurations using this cloud security scanning approach?▼

Yes, you can detect Kubernetes misconfigurations using this approach, as the scanning process identifies security issues across Kubernetes clusters alongside AWS, GCP, and Azure infrastructure services.

What is the best way to check for exposed Lambda functions in my AWS environment?▼

The best way to check for exposed Lambda functions is to run an automated cloud security scan that identifies and validates these specific misconfigurations to prevent potential unauthorized access or data breaches.

Related Skills

cmndcntrlcybercmndcntrlcyber
3

hunt-cloud-misconfig

Scan AWS, GCP, Azure, and Kubernetes for cloud misconfigurations.

Community
Advanced
ersinkocersinkoc
2

Cloud Storage Misconfiguration Testing

Automate cloud storage misconfiguration testing across AWS S3, Azure Blob, and Google Cloud Storage.

Community
Advanced
ancolemanancoleman
503

resource-tagging

Implement and enforce cloud resource tagging strategies across AWS, Azure, GCP, and Kubernetes.

Community
Advanced
NickCrewNickCrew
29

kubernetes-security-policies

Enforce Kubernetes security policies across clusters and namespaces.

Community
Advanced