Agent skill · security · alirezarezvani
cloud-security
Use when checking AWS, Azure or GCP for security misconfigurations: IAM privilege escalation, public buckets, open security groups, IaC gaps. Runs cloud_posture_check.py and maps findings to MITRE ATT&CK.
Why this skill is useful
Adds a cloud posture check tool with executable scripts for assessing IAM policies, S3 configurations, and security groups that aren't available in public documentation.
What it needs
Requires jq installed locally. Requires aws, azure, gcp account access. About 9k tokens when loaded. Last updated 2026-08-05. 23,939 stars on the source repository.
What this skill does
Cloud Security Cloud security posture assessment skill for detecting IAM privilege escalation, public storage exposure, network configuration risks, and infrastructure-as-code misconfigurations. This is NOT incident response for active cloud compromise (see incident-response) or application vulnerability scanning (see security-pen-testing) — this is about systematic cloud configuration analysis to prevent exploitation. --- Table of Contents Overview Cloud Posture Check Tool IAM Policy Analysis S3 Exposure Assessment Security Group Analysis IaC Security Review Cloud Provider Coverage Matrix Workflows Anti-Patterns Cross-References --- Overview What This Skill Does This skill provides the methodology and tooling for cloud security posture management (CSPM) — systematically checking cloud configurations for misconfigurations that create exploitable attack surface. It covers IAM privilege escalation paths, storage public exposure, network over-permissioning, and infrastructure code security. Distinction from Other Security Skills Skill Focus Approach ------- ------- ---------- cloud-security (this) Cloud configuration risk Preventive — assess before exploitation incident-response Active cloud incidents Reactive — triage confirmed cloud compromise threat-detection Behavioral anomalies Proactive — hunt for attacker activity in cloud logs security-pen-testing Application vulnerabilities Offensive — actively exploit found weaknesses Prerequisites Read access to IAM policy documents, S3 bucket configurations, and security group rules in JSON format. For continuous monitoring, integrate with cloud provider APIs (AWS Config, Azure Policy, GCP Security Command Center). --- Cloud Posture Check Tool The cloudposturecheck.py tool runs three types of checks: iam (privilege escalation), s3 (public access), and sg (network exposure). It auto-detects the check type from the config file structure or accepts explicit --check flags. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills alirezarezvani/cloud-security--39cd6b