Skill282 estrellas del repoactualizado yesterday

pentest-cloud-infrastructure

This skill automates security assessments across multi-cloud environments (AWS, Azure, GCP) and Kubernetes clusters by running configuration audits, scanning Infrastructure-as-Code files, analyzing container images, and monitoring runtime behavior. Use it to identify misconfigurations, excessive permissions, and vulnerabilities in cloud infrastructure and containerized deployments before they pose security risks.

Ver fuente Repositorio: JoySafeter

Instalar en Claude Code

Copiar

git clone --depth 1 https://github.com/jd-opensource/JoySafeter /tmp/pentest-cloud-infrastructure && cp -r /tmp/pentest-cloud-infrastructure/skills/pentest-cloud-infrastructure ~/.claude/skills/pentest-cloud-infrastructure

Después abre una sesión nueva de Claude Code; el skill carga automáticamente.

Definición

SKILL.md

# Pentest Cloud Infrastructure

## Purpose
Assess the security configuration of cloud environments and containerized infrastructure to detect misconfigurations, excessive permissions, and vulnerabilities.

## Core Workflow
1. **Cloud Config Audit**: Assess cloud provider configuration (AWS/Azure/GCP) using `prowler` and `scoutsuite`.
2. **IaC Scanning**: Analyze Infrastructure-as-Code (Terraform, CloudFormation) for security flaws using `checkov` and `terrascan`.
3. **Container Security**: Scan container images and runtime environments using `trivy`, `clair`, and `dockle`.
4. **Kubernetes Assessment**: Audit K8s clusters for CIS compliance and vulnerabilities using `kube-bench` and `kube-hunter`.
5. **Runtime Monitoring**: Analyze runtime behavior and rule violations using `falco`.

## References
- `references/tools.md`
- `references/workflows.md`

Del mismo repositorio

appSkill

brainstormingSkill

You MUST use this before any creative work - creating features, building components, adding functionality, or modifying behavior. Explores user intent, requirements and design before implementation.

executing-plansSkill

Use when you have a written implementation plan to execute in a separate session with review checkpoints

openclaw-security-checkerSkill

OpenClaw 安全检测工具，基于安全实践指南验证配置安全、权限隔离、网络策略、日志审计和运行时完整性

openclaw-threat-detectSkill

OpenClaw 攻击模式检测工具，识别数据外传、反弹Shell、文件泄露、Prompt注入、供应链投毒等高危行为，支持 MITRE ATT&CK 映射

pdfSkill

Comprehensive PDF manipulation toolkit for extracting text and tables, creating new PDFs, merging/splitting documents, and handling forms. When Claude needs to fill in a PDF form or programmatically process, generate, or analyze PDF documents at scale.

pentest-ai-llm-securitySkill

AI/LLM application security testing — prompt injection, jailbreaking, data exfiltration, and insecure output handling per OWASP LLM Top 10.

pentest-api-deepSkill

Deep OWASP API Security Top 10 testing for REST, GraphQL, gRPC, and WebSocket APIs — BFLA, mass assignment, rate limiting, and unsafe consumption.