Agent skill

cloud-containers

Cloud and container security testing - AWS, Azure, GCP, Docker, and Kubernetes misconfigurations and exploitation.

Stars 129
Forks 20

Install this agent skill to your Project

npx add-skill https://github.com/transilienceai/communitytools/tree/main/projects/pentest/.claude/skills/cloud-containers

SKILL.md

Cloud & Containers

Test cloud infrastructure and container environments for security misconfigurations and exploitation paths.

Techniques

Platform Key Vectors
AWS S3 bucket exposure, IAM misconfig, metadata service, Lambda abuse
Azure Blob storage, RBAC flaws, managed identity, App Service misconfig
GCP Cloud Storage, service account keys, metadata server, IAM
Docker Container escape, privileged mode, socket exposure, image vulnerabilities
Kubernetes RBAC bypass, secret exposure, pod escape, API server access

Workflow

  1. Enumerate cloud resources and services
  2. Test IAM/RBAC configurations
  3. Check storage and secrets exposure
  4. Test container isolation and escape paths
  5. Document findings with cloud-specific evidence

Reference

  • reference/cloud-security.md - Platform-specific attack guides (AWS, Azure, GCP, Docker, K8s)

Expand your agent's capabilities with these related and highly-rated skills.

Didn't find tool you were looking for?

Be as detailed as possible for better results