Skill UI

Audits IAM policies, ACLs, and similar access control setups via the access-control-auditor plugin to surface misconfigurations, overly permissive roles, and privilege escalation risks across cloud and infrastructure environments.

Audits IAM policies, ACLs, and similar access control setups via the access-control-auditor plugin to surface misconfigurations, overly permissive roles, and privilege escalation risks across cloud and infrastructure environments.

This skill automates the validation of AWS environments against critical industry compliance benchmarks. It performs detailed checks for CIS AWS Foundations, PCI-DSS, HIPAA, and SOC 2 standards, covering key areas like Identity and Access Management (IAM), logging, data protection, and network security. Essential for preparing for regulatory audits and maintaining continuous secure operations.

This comprehensive guide provides scripts and best practices for auditing, hardening, and enforcing AWS Identity and Access Management (IAM) policies. It covers implementing least privilege, defense in depth, and auditing for overly permissive actions, unused roles, and outdated access keys, significantly enhancing cloud security posture.

A comprehensive guide covering advanced offensive techniques for AWS cloud environments. Techniques include detailed IAM enumeration, privilege escalation paths, SSRF exploitation targeting metadata endpoints (IMDSv1/v2), S3 bucket exploitation, and Lambda function code extraction. Essential for security professionals and red team operations conducting authorized cloud vulnerability assessments.

This comprehensive skill provides a security posture assessment for AWS environments. It uses AWS CLI commands to audit critical security areas, including IAM policy review, network security groups, data encryption status (EBS, S3, RDS), and logging mechanisms (CloudTrail, VPC Flow Logs). Use this to proactively identify misconfigurations and ensure adherence to security best practices and compliance standards.

Generates complete, production-ready Google Cloud Platform (GCP) code examples and infrastructure templates. It spans various modern AI patterns, including ADK agents, Genkit RAG flows, and multimodal analysis using Vertex AI and Gemini. The output includes runnable code, deployment configuration (Terraform/IaC), security best practices (IAM, VPC-SC), and monitoring setup, ensuring enterprise-grade reliability and cost optimization.

Validates Vertex AI Agent Engine GitHub Actions workflows, enforcing Workload Identity Federation, least-privilege IAM, OIDC permissions, and security scanning so GCP deployments stay automated and secure.

Automates Google Cloud IAM binding tasks by guiding users through best practices, generating production-ready code and configs, and validating outputs across compute, storage, BigQuery, Vertex AI, Cloud Run, Firebase, and other GCP services whenever iam binding creator is mentioned.

A comprehensive guide and script collection for auditing Google Cloud Platform IAM permissions. It helps identify overly permissive bindings, unused service accounts, primitive role usage, and cross-project access risks. It utilizes gcloud CLI, Policy Analyzer, and IAM Recommender to ensure compliance and minimize the blast radius of misconfigurations.

This guide details comprehensive methods for auditing Terraform infrastructure-as-code (IaC) against security misconfigurations. By leveraging industry-standard tools like Checkov, tfsec, Terrascan, and Open Policy Agent (OPA), users can detect critical vulnerabilities—such as overly permissive IAM policies, public resource exposure, and missing encryption—before cloud deployment. It is essential for integrating robust security gates into CI/CD pipelines and enforcing compliance standards.

Guide for assessing AWS, Azure, and GCP environments with tools such as Pacu, ScoutSuite, and Prowler to uncover IAM weaknesses, exposed storage, insecure serverless functions, and cloud-native attack chains.