cloud-pentest From the maker
awarexone/Agentic-Bug-HunterSkill
Post-access cloud exploitation for AWS, GCP, and Azure — what to do AFTER you obtain credentials or reach a metadata endpoint. Covers IAM enumeration and privilege escalation (iam:PassRole, CreatePolicyVersion, AssumeRole chains, GCP service-account impersonation, Azure managed-identity abuse), IMDSv1/v2 metadata credential theft, STS token abuse, S3/GCS/Blob bucket takeover and object exfil, Lambda/Cloud Functions env-var secrets, cross-account and cross-service pivoting, and turning leaked keys into demonstrated impact (read PII, assume admin, exfil data). Assumes authorized scope only. Use
Why this score
This repo hosts 10 skills, so its 5,379 stars are split between them (about 538 each) for scoring.
Popularity score: 77/100 from public GitHub signals only. It shows how widely used and maintained this is, not how well it works. Not included yet: the fake-star check. The security scan is shown separately and doesn't change the score. How we rank
Security
Scanned Oct 20, 2026 at commit 40b03eeea639, with Cisco's open-source skill-scanner.
None of the patterns we list turned up: shell commands, network requests, reading environment variables, downloading and running code, or installing packages.
A scan lists patterns in the code. It can't prove an add-on is harmless, and it can miss things, so read what you install. How we scan
Alternatives
Other makers' add-ons that do the same job, next to this one.
| Name | Score | Stars | Context | Updated |
|---|---|---|---|---|
| This onecloud-pentest awarexone/Agentic-Bug-Hunter · Skill | 77 | ★ 5.4k | ≈154 always | 26d ago |
| cloud-iam-deep elementalsouls/Claude-BugHunter · Skill Also for AWS | 77 | ★ 5.2k | ≈154 always | 16d ago |
| offensive-cloud SnailSploit/Claude-Red · Skill Also for AWS | 79 | ★ 7.6k | ≈154 always | 23d ago |
| cloud-audit briiirussell/cybersecurity-skills · Skill Also for AWS | 55 | ★ 426 | ≈88 always | 5mo ago |
| aws-cloud-patterns rohitg00/awesome-claude-code-toolkit · Skill Also for AWS | 66 | ★ 2.7k | ≈29 always | 6mo ago |
| cloud-security hypnguyen1209/offensive-claude · Skill Also for AWS | 60 | ★ 394 | ≈56 always | 1mo ago |