network-security-group-auditor

Audit AWS security groups, network ACLs, and firewall rules for permissive access.

1|Updated Feb 26, 2026

Search Tags:#aws #compliance #cloud security #security group #firewall audit #network acl

Ready to run

npx skills add https://github.com/webrix-ai/agent-skills --skill network-security-group-auditor

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: network-security-group-auditor
Source: https://github.com/webrix-ai/agent-skills/tree/main/skills/network-security-group-auditor
Command: npx skills add https://github.com/webrix-ai/agent-skills --skill network-security-group-auditor

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps teams detect overly permissive AWS network configurations before they create security incidents or compliance findings.

Core Features & Use Cases

Reviews security groups, network ACLs, and firewall rules for public exposure and unnecessary access.
Finds risky ingress and egress patterns, including open management ports, broad CIDRs, and database services exposed to the internet.
Identifies unused or redundant security groups and turns findings into a prioritized remediation plan for cloud security and audit teams.

Quick Start

Ask the network security group auditor to review my AWS accounts for public exposure, open management ports, and unused security groups, then return prioritized fixes.

Frequently Asked Questions about network-security-group-auditor

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I audit AWS security groups for public exposure and overly permissive rules?▼

To audit AWS security groups, you inventory all rules and attachments to flag risky ingress like 0.0.0.0/0 and broad egress. This process classifies risk levels and produces prioritized remediation guidance with specific rule changes.

What is the best way to find unused security groups in my AWS accounts?▼

Finding unused security groups involves inventorying your AWS network configurations to identify redundant rules and attachments. The audit turns these findings into a prioritized remediation plan for cloud security and compliance teams.

Can I check my network ACLs for open management ports before a compliance audit?▼

Yes, you can check network ACLs for open management ports as part of pre-audit hardening. The audit reviews firewall rules for unnecessary access and broad CIDRs, generating evidence collection and specific rule changes to secure your environment.

How do I investigate AWS firewall misconfigurations after a security incident?▼

For post-incident misconfiguration investigations, the audit examines security groups and network ACLs for risky ingress and egress patterns. It identifies database services exposed to the internet and provides prioritized fixes to close gaps.

Does this firewall audit work for multi-account cloud security reviews?▼

Yes, the firewall audit applies to multi-account cloud security reviews by inventorying rules across accounts. It flags broad CIDRs and public exposure, delivering prioritized remediation guidance for each identified risk level.