← All skills
aws-penetration-testing
65 / 100 · Review before installing
Check before installing. Some of what it can do is expected: a coding skill usually runs build and test commands.
By anubhavg-icpl/vibe (GitHub) · coding · 13 stars · scanned at commit d51e7ac
Provide comprehensive techniques for penetration testing AWS cloud environments. Covers IAM enumeration, privilege escalation, SSRF to metadata endpoint, S3 bucket exploitation, Lambda code extraction, and persistence techniques for red team operations. Use when you need help with aws penetration testing.
Works with any agent that supports SKILL.md skills.
What this skill can do
Downloads and installs other software
The author does not mention this. It runs automatically when the plugin is installed.
Found in 14 places.
Show 11 more
- skills/ag-aws-penetration-testing/references/advanced-aws-pentesting.md, line 54
pip3 install --user cloudsplaining - .claude/settings.json, line 166
"Bash(npx @claude-flow*)", - .claude/settings.json, line 167
"Bash(npx claude-flow*)", - .mcp.json, line 4
"command": "npx", - hooks/cmods/README.md, line 96
npx eslint --fix "$FILE" 2>/dev/null - hooks/cmods/post-edit-format.sh, line 29
npx prettier --write "$FILE" 2>/dev/null && FORMATTED=true - hooks/cmods/post-edit-format.sh, line 32
npx biome format --write "$FILE" 2>/dev/null && FORMATTED=true - hooks/cmods/post-edit-format.sh, line 80
npx prettier --write "$FILE" 2>/dev/null && FORMATTED=true - hooks/cmods/post-edit-format.sh, line 86
npx prettier --write "$FILE" 2>/dev/null && FORMATTED=true - hooks/cmods/pre-commit-lint.sh, line 38
echo "$files" | xargs npx eslint --max-warnings 0 2>/dev/null - hooks/hooks.json, line 106
"command": "#!/bin/bash\n# Run TypeScript check after editing TS files\ninput=$(cat)\nfile_path=$(echo \"$input\" | jq -r '.tool_input.file_path // \"\"')\n\nif
Runs commands on your computer
The author does not mention this. Expected for a coding skill.
Found in 80 places.
Show 17 more
- skills/ag-aws-penetration-testing/SKILL.md, line 122
TOKEN=$(curl -X PUT -H "X-aws-ec2-metadata-token-ttl-seconds: 21600" \ - skills/ag-aws-penetration-testing/SKILL.md, line 134
/proc/self/environ - skills/ag-aws-penetration-testing/SKILL.md, line 162
aws iam create-access-key --user-name target_user - skills/ag-aws-penetration-testing/SKILL.md, line 168
aws iam attach-user-policy --user-name my_username \ - skills/ag-aws-penetration-testing/SKILL.md, line 175
aws iam put-user-policy --user-name my_username \ - skills/ag-aws-penetration-testing/SKILL.md, line 197
aws lambda update-function-code --function-name target_function \ - skills/ag-aws-penetration-testing/SKILL.md, line 209
./bucket_finder.rb wordlist.txt - skills/ag-aws-penetration-testing/SKILL.md, line 221
aws s3 ls - skills/ag-aws-penetration-testing/SKILL.md, line 242
aws lambda list-functions - skills/ag-aws-penetration-testing/SKILL.md, line 260
aws ssm describe-instance-information - skills/ag-aws-penetration-testing/SKILL.md, line 280
aws ec2 create-snapshot --volume-id vol-xxx --description "Audit" - skills/ag-aws-penetration-testing/SKILL.md, line 301
secretsdump.py -system ./SYSTEM -ntds ./ntds.dit local - skills/ag-aws-penetration-testing/SKILL.md, line 311
git clone https://github.com/NetSPI/aws_consoler - skills/ag-aws-penetration-testing/SKILL.md, line 325
aws cloudtrail delete-trail --name trail_name - skills/ag-aws-penetration-testing/SKILL.md, line 379
https://app.com/proxy?url=http://169.254.169.254/latest/meta-data/iam/security-credentials/ - .claude/settings.json, line 9
"command": "sh -c 'exec node \"${CLAUDE_PROJECT_DIR:-.}/.claude/helpers/hook-handler.cjs\" pre-bash'", - .claude/settings.json, line 19
"command": "sh -c 'exec node \"${CLAUDE_PROJECT_DIR:-.}/.claude/helpers/hook-handler.cjs\" pre-edit'",
and 60 more places
Sends data to these websites: 169.254.169.254, api_id.execute-api.region.amazonaws.com
The author does not mention this.
Found in 5 places.
Show 2 more
Reads your saved credentials, such as SSH keys or .env files
This is disclosed by the author in the skill's SKILL.md or README. It runs automatically when the plugin is installed.
Found in 1 place.
Safer alternatives
Low-risk skills in the same category (coding) that look related. Check that one does what you need.
Install
Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.
if [ -e ~/.agents/skills/'aws-penetration-testing' ] || [ -L ~/.agents/skills/'aws-penetration-testing' ]; then echo 'A skill folder named aws-penetration-testing already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/anubhavg-icpl/vibe' "$d" && git -C "$d" checkout --quiet 'd51e7ac9a34111cd2e63daed83c2198f91570050' -- 'skills/ag-aws-penetration-testing' && mkdir -p ~/.agents/skills && cp -R "$d"/'skills/ag-aws-penetration-testing' ~/.agents/skills/'aws-penetration-testing' && rm -rf "$d"; fi
Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'aws-penetration-testing' ~/.claude/skills/'aws-penetration-testing' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.
Badge for your README
The badge for anubhavg-icpl/vibe shows the score of its lowest-scoring skill.
[](https://zalavijaysinh.github.io/skilltrust/repos/anubhavg-icpl/vibe/)
Score history
| Date | Version | Score |
|---|
| 2026-11-08 | d51e7ac | 65 |