Agent skill · security · aiskillstore
cloud-penetration-testing
This skill should be used when the user asks to "perform cloud penetration testing", "assess Azure or AWS or GCP security", "enumerate cloud resources", "exploit cloud misconfigurations", "test O365 security", "extract secrets from cloud environments", or "audit cloud infrastructure". It provides comprehensive techniques for security assessment across major cloud platforms.
Why this skill is useful
Adds executable scripts and specific commands for comprehensive cloud penetration testing across Azure, AWS, and GCP that are not commonly found in public documentation.
What it needs
Requires awscli, az, gcloud, pacu, scoutsuite installed locally. About 7k tokens when loaded. Last updated 2026-08-07. 405 stars on the source repository.
What this skill does
Cloud Penetration Testing Purpose Conduct comprehensive security assessments of cloud infrastructure across Microsoft Azure, Amazon Web Services (AWS), and Google Cloud Platform (GCP). This skill covers reconnaissance, authentication testing, resource enumeration, privilege escalation, data extraction, and persistence techniques for authorized cloud security engagements. Prerequisites Required Tools Required Knowledge Cloud architecture fundamentals Identity and Access Management (IAM) API authentication mechanisms DevOps and automation concepts Required Access Written authorization for testing Test credentials or access tokens Defined scope and rules of engagement Outputs and Deliverables 1. Cloud Security Assessment Report - Comprehensive findings and risk ratings 2. Resource Inventory - Enumerated services, storage, and compute instances 3. Credential Findings - Exposed secrets, keys, and misconfigurations 4. Remediation Recommendations - Hardening guidance per platform Core Workflow Phase 1: Reconnaissance Gather initial information about target cloud presence: Phase 2: Azure Authentication Authenticate to Azure environments: Phase 3: Azure Enumeration Discover Azure resources and permissions: Phase 4: Azure Exploitation Exploit Azure misconfigurations: Phase 5: Azure Persistence Establish persistence in Azure: Phase 6: AWS Authentication Authenticate to AWS environments: Phase 7: AWS Enumeration Discover AWS resources: Phase 8: AWS Exploitation Exploit AWS misconfigurations: Phase 9: AWS Persistence Establish persistence in AWS: Phase 10: GCP Enumeration Discover GCP resources: Phase 11: GCP Exploitation Exploit GCP misconfigurations: Quick Reference Azure Key Commands Action Command -------- --------- Login Connect-AzAccount List subscriptions Get-AzSubscription List users Get-MsolUser -All List groups Get-MsolGroup -All Current roles Get-AzRoleAssignment List VMs Get-AzVM List storage Get-AzStorageAccount Key Vault secrets az keyvault secret list --vault-name …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aiskillstore/cloud-penetration-testing