Home / Skills / cloud-iam-deep
cloud-iam-deep
elementalsouls/Claude-BugHunterSkill
Cloud IAM red-team attack chain across AWS, Azure, GCP — focused on EXTERNAL exploitation paths and post-credential-discovery privilege analysis. Covers IAM enumeration (aws iam, az role, gcloud iam), STS/AssumeRole chaining, Azure Managed Identity abuse (via SSRF/leak), GCP service account JSON abuse, IMDSv1/v2 attacks via SSRF, K8s ServiceAccount token privilege analysis once held (token discovery / cluster exposure is owned by hunt-k8s), role-trust-policy confused-deputy, cross-account assume-role enumeration, IAM privilege escalation patterns (24+ AWS, 8+ Azure, 6+ GCP), and AWS Cognito Id
Why this score
This repo hosts 10 skills, so its 5,176 stars are split between them (about 518 each) for scoring.
Popularity score: 77/100 from public GitHub signals only. It shows how widely used and maintained this is, not how well it works. Not included yet: the fake-star check. The security scan is shown separately and doesn't change the score. How we rank
Security
Scanned Oct 20, 2026 at commit dce681c32a7e, with Cisco's open-source skill-scanner.
What its code does:
- Reads environment variables and sends network requests with them API clients do this to send your key to the service. Check which service it talks to.SKILL.md:167 and 1 more
Web addresses in its code:
- management.azure.comSKILL.md:213
These are the sites named in the code, so it's where your data could go. It isn't a complete list: code can build addresses while it runs, and a few of these may be links rather than calls. Whatever you send also goes to the AI model you use.
A scan lists patterns in the code. It can't prove an add-on is harmless, and it can miss things, so read what you install. How we scan
Alternatives
Other makers' add-ons that do the same job, next to this one.
| Name | Score | Stars | Context | Updated |
|---|---|---|---|---|
| This onecloud-iam-deep elementalsouls/Claude-BugHunter · Skill | 77 | ★ 5.2k | ≈154 always | 16d ago |
| cloud-pentest awarexone/Agentic-Bug-Hunter · Skill Also for AWS | 77 | ★ 5.4k | ≈154 always | 26d ago |
| cloud-audit briiirussell/cybersecurity-skills · Skill Also for AWS | 55 | ★ 426 | ≈88 always | 5mo ago |
| offensive-cloud SnailSploit/Claude-Red · Skill Also for AWS | 79 | ★ 7.6k | ≈154 always | 23d ago |
| cloud-cli yc-software/qm · Skill Also for AWS | 82 | ★ 15k | ≈67 always | 16d ago |
| cloud-security hypnguyen1209/offensive-claude · Skill Also for AWS | 60 | ★ 394 | ≈56 always | 1mo ago |