Cloud Security Posture Checker
Audits cloud IAM policies, S3 buckets and security groups for misconfigurations and escalation paths
- Repository
- alirezarezvani/claude-skills
- Stars
- 29,149
- Licence
- MIT
- Files
- 3 files
What it does
Once installed, the agent can review cloud configuration files (IAM policies, S3 bucket settings, security group rules in JSON) and look for settings that could let an attacker escalate privileges, expose storage publicly, or open risky network ports. It maps findings to MITRE ATT&CK techniques and suggests least-privilege fixes. It also runs a bundled Python script that produces structured findings and exit codes for use in pipelines. It is preventive: it assesses configuration before any exploitation, not active breaches.
Great for
- Engineers or cloud admins reviewing IAM policies before deployment
- Teams wanting a repeatable check on S3 public access and encryption settings
- Security reviewers triaging security group rules for exposed admin ports
Skip it if
- Responding to an active cloud compromise, since the skill itself directs that to a separate incident-response skill
- Scanning web applications for vulnerabilities, which is a different skill (security-pen-testing)
- Treating its output as a complete audit: it only analyses files you supply and the script is described as AWS-focused, with Azure and GCP as stubs
Try asking
- “Check this IAM policy JSON for privilege escalation paths and suggest least-privilege fixes”
- “Assess this S3 bucket configuration for public access and missing encryption”
- “Review these security group rules for open admin ports like SSH or RDP”
- “Run all posture checks on config.json with the internet-facing severity modifier”
Install in 3 steps
- 1
Download the skill
The ZIP contains the 3 original files, the MIT licence and an attribution note.
cloud-security.zip - 2
Add it to your agent
Claude Code (all projects)
mkdir -p ~/.claude/skills && unzip cloud-security.zip -d ~/.claude/skills/Claude Code / Agent SDK (this project only)
mkdir -p .claude/skills && unzip cloud-security.zip -d .claude/skills/Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.
- 3
Ask for the task
No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.
Get better results
- Export configurations as JSON and review the findings yourself; the tool is a helper, not a substitute for a full audit.
- Use the --severity-modifier flags to raise severity for internet-facing or regulated-data resources.
- Run the script against a copy of sensitive config files rather than production exports you do not need to share.
What's inside
- references/cspm-checks.md
- scripts/cloud_posture_check.py
- SKILL.md
Redistributed unmodified from alirezarezvani/claude-skills under the MIT licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.