Cloud Penetration Testing Agent Skill

This skill should be used when the user asks to "perform cloud penetration testing", "assess Azure or AWS or GCP security", "enumerate cloud resources", "exploit cloud misconfigurations", "test O365 security", "extract secrets from cloud environments", or "audit cloud infrastructure". It provides comprehensive techniques for security assessment across major cloud platforms.

7k tokens

context cost

the whole folder, loaded on every use

files

instructions only

copies elsewhere

how many repositories repackaged it

505

stars on the repo

on the repository, not the skill itself

Install

one command, takes just this skill from the repository

npx skills add https://github.com/Dokhacgiakhoa/Agent-Skills-4-Vibe-Coding-CLI --skill Cloud Penetration Testing

What comes with it

24 721 bytes besides the instruction

references/advanced-cloud-scripts.md

sub-skills/aws-key-commands.md

sub-skills/azure-key-commands.md

sub-skills/detection-considerations.md

sub-skills/example-1-azure-password-spray.md

sub-skills/example-2-aws-s3-bucket-enumeration.md

sub-skills/example-3-gcp-service-account-compromise.md

sub-skills/gcp-key-commands.md

sub-skills/legal-requirements.md

sub-skills/metadata-service-urls.md

sub-skills/phase-1-reconnaissance.md

sub-skills/phase-10-gcp-enumeration.md

sub-skills/phase-11-gcp-exploitation.md

sub-skills/phase-2-azure-authentication.md

sub-skills/phase-3-azure-enumeration.md

sub-skills/phase-4-azure-exploitation.md

sub-skills/phase-5-azure-persistence.md

sub-skills/phase-6-aws-authentication.md

sub-skills/phase-7-aws-enumeration.md

sub-skills/phase-8-aws-exploitation.md

sub-skills/phase-9-aws-persistence.md

sub-skills/required-access.md

sub-skills/required-knowledge.md

sub-skills/required-tools.md

sub-skills/technical-limitations.md

sub-skills/useful-tools.md

The instruction itself

29 sections, as written by the author

Cloud Penetration Testing

Purpose

Conduct comprehensive security assessments of cloud infrastructure across Microsoft Azure, Amazon Web Services (AWS), and Google Cloud Platform (GCP). This skill covers reconnaissance, authentication testing, resource enumeration, privilege escalation, data extraction, and persistence techniques for authorized cloud security engagements.

Prerequisites

🧠 Knowledge Modules (Fractal Skills)

1. Required Tools

2. Required Knowledge

3. Required Access

4. Phase 1: Reconnaissance

5. Phase 2: Azure Authentication

6. Phase 3: Azure Enumeration

7. Phase 4: Azure Exploitation

8. Phase 5: Azure Persistence

9. Phase 6: AWS Authentication

10. Phase 7: AWS Enumeration

11. Phase 8: AWS Exploitation

12. Phase 9: AWS Persistence

13. Phase 10: GCP Enumeration

14. Phase 11: GCP Exploitation

15. Azure Key Commands

16. AWS Key Commands

17. GCP Key Commands

18. Metadata Service URLs

19. Useful Tools

20. Legal Requirements

21. Technical Limitations

22. Detection Considerations

23. Example 1: Azure Password Spray

24. Example 2: AWS S3 Bucket Enumeration

25. Example 3: GCP Service Account Compromise

Other skills for the same job

different authors, same section of the catalogue

Cloud Penetration Testing

Comprehensive Flow Nexus platform management - authentication, sandboxes, app deployment, payments, and challenges

14k tokens

Security Scanning Security Hardening

by ComeOnOliver

×2

Coordinate multi-layer security scanning and hardening across application, infrastructure, and compliance controls.

6k tokens

K8s Security Policies

by ComeOnOliver

×2

Implement Kubernetes security policies including NetworkPolicy, PodSecurityPolicy, and RBAC for production-grade security. Use when securing Kubernetes clusters, implementing network isolation, or enforcing pod security standards.

6k tokens

K8s Security Policies

Run Azure compliance and security audits with azqr plus Key Vault expiration checks. Covers best-practice assessment, resource review, policy/compliance validation, and security posture checks. WHEN: compliance scan, security audit, BEFORE running azqr (compliance cli tool), Azure best practices, Key Vault expiration check, expired certificates, expiring secrets, orphaned resources, compliance assessment.

Comprehensive AWS security posture assessment using AWS CLI and security best practices

3k tokens

How to use it

Copy the folder

Take dokhacgiakhoa/cloud penetration testing from the repository into ~/.claude/skills for personal use, or into .claude/skills inside a project.

Check the name does not clash

The agent identifies a skill by the name field in its header. Two skills with the same name cannot sit side by side — one of them will be ignored.