Home / Skills / cloud-saas-exposure

cloud-saas-exposure

Organization-grade cloud and supply-chain attack-surface discovery: S3/GCS/Azure Blob bucket discovery via observed-name mining (CNAME/cert-SAN/Wayback) and bounded two-class permutation (6 prefixes x 15 suffixes on trusted tokens, bounded target-bound expansion on subdomain stems), existence (HEAD/GET) vs public-listing confirmation, object-key triage into 9 value tiers (database dumps, credentials, IaC state, kubeconfig, VCS dirs, config, archives, PII, logs), dangling-CNAME bucket-takeover detection, and the ownership-gated severity model that stops an unattributable public bucket from beco

ScannedSkillSource: GitHub

2,831 stars +27 this week Updated 26d ago License MIT Context ≈155 tokens always loaded

74popular

Why this score

Stars

17/35

Usage (forks)

7/15

Upkeep

25/25

License

15/15

Owner history

10/10

This repo hosts 10 skills, so its 2,831 stars are split between them (about 283 each) for scoring.

Popularity score: 74/100 from public GitHub signals only. It shows how widely used and maintained this is, not how well it works. Not included yet: the fake-star check. The security scan is shown separately and doesn't change the score. How we rank

Security

Scanned Oct 20, 2026 at commit 114e0bb90e47, with Cisco's open-source skill-scanner.

Results for this version aren't published yet.

A scan lists patterns in the code. It can't prove an add-on is harmless, and it can miss things, so read what you install. How we scan

Alternatives

Other makers' add-ons that do the same job, next to this one.

Name	Score	Stars	Context	Updated
This onecloud-saas-exposure elementalsouls/Claude-OSINT · Skill	74	★ 2.8k	≈155 always	26d ago
saas-builder ixartz/SaaS-Boilerplate · Skill Same job: databases	85	★ 7.5k	≈78 always	1mo ago
saas-video pexoai/pexo-skills · Skill Both about saa	57	★ 810	≈27 always	3mo ago
orca-data-exposure orcasecurity/orca-skills · Skill Both about exposure and pii	58	★ 55	≈84 always	20d ago
cloud browser-use/browser-use · Skill Both about cloud	94	★ 119k	≈19 always	18d ago
remotion-saas remotion-dev/skills · Skill Both about saa	67	★ 5.4k	≈10 always	16d ago

Install

mkdir -p .claude/skills/cloud-saas-exposure

curl -sL https://codeload.github.com/elementalsouls/Claude-OSINT/tar.gz/114e0bb90e47f01e64dc72d1f00b4221e0dde875 | tar -xz -C .claude/skills/cloud-saas-exposure --strip-components=3 "Claude-OSINT-114e0bb90e47f01e64dc72d1f00b4221e0dde875/skills/cloud-saas-exposure"

To remove it later:

rm -rf .claude/skills/cloud-saas-exposure

npx skills add elementalsouls/Claude-OSINT --skill cloud-saas-exposure

Pinned to commit 114e0bb90e47 as listed by GitHub.

Context cost: ≈155 tokens loaded every session (name and description), plus ≈11k tokens when the skill is used.

The Claude Code command downloads this skill folder at the pinned commit into .claude/skills/. The Skills CLI (npx skills) works with many agents but can't pin a version, so it installs whatever is current.

Used for

Engineering › Databases Engineering › DevOps & cloud SaaS & startups

Facts

Repo: elementalsouls/Claude-OSINT
Stars: 2,831
Forks: 520
Last push: 2026-10-09 (26d ago)
License: MIT
Owner: elementalsouls · since 2019
Language: Python
Works with: Claude Code, Skills CLI