← All skills
cloud-penetration-testing
55 / 100 · Review before installing
Check before installing. Some of what it can do is expected: a coding skill usually runs build and test commands.
By anubhavg-icpl/vibe (GitHub) · coding · 13 stars · scanned at commit d51e7ac
Conduct comprehensive security assessments of cloud infrastructure across Microsoft Azure, Amazon Web Services (AWS), and Google Cloud Platform (GCP). Use when you need help with cloud penetration testing.
Works with any agent that supports SKILL.md skills.
What this skill can do
Runs commands on your computer
The author does not mention this. Expected for a coding skill.
Found in 72 places.
Show 17 more
- skills/ag-cloud-penetration-testing/SKILL.md, line 226
aws sts get-caller-identity - skills/ag-cloud-penetration-testing/SKILL.md, line 260
aws rds describe-db-snapshots --snapshot-type manual --query=DBSnapshots[*].DBSnapshotIdentifier - skills/ag-cloud-penetration-testing/SKILL.md, line 282
aws iam list-access-keys --user-name <username> - skills/ag-cloud-penetration-testing/SKILL.md, line 299
gcloud auth login - skills/ag-cloud-penetration-testing/SKILL.md, line 344
curl "http://metadata.google.internal/computeMetadata/v1/?recursive=true&alt=text" -H "Metadata-Flavor: Google" - skills/ag-cloud-penetration-testing/SKILL.md, line 464
aws s3 ls | awk '{print $3}' > buckets.txt - skills/ag-cloud-penetration-testing/SKILL.md, line 482
gcloud auth activate-service-account --key-file compromised-sa.json - .claude/settings.json, line 9
"command": "sh -c 'exec node \"${CLAUDE_PROJECT_DIR:-.}/.claude/helpers/hook-handler.cjs\" pre-bash'", - .claude/settings.json, line 19
"command": "sh -c 'exec node \"${CLAUDE_PROJECT_DIR:-.}/.claude/helpers/hook-handler.cjs\" pre-edit'", - .claude/settings.json, line 31
"command": "sh -c 'exec node \"${CLAUDE_PROJECT_DIR:-.}/.claude/helpers/hook-handler.cjs\" post-edit'", - .claude/settings.json, line 41
"command": "sh -c 'exec node \"${CLAUDE_PROJECT_DIR:-.}/.claude/helpers/hook-handler.cjs\" post-bash'", - .claude/settings.json, line 52
"command": "sh -c 'exec node \"${CLAUDE_PROJECT_DIR:-.}/.claude/helpers/hook-handler.cjs\" route'", - .claude/settings.json, line 63
"command": "sh -c 'exec node \"${CLAUDE_PROJECT_DIR:-.}/.claude/helpers/hook-handler.cjs\" session-restore'", - .claude/settings.json, line 68
"command": "sh -c 'exec node \"${CLAUDE_PROJECT_DIR:-.}/.claude/helpers/auto-memory-hook.mjs\" import'", - .claude/settings.json, line 79
"command": "sh -c 'exec node \"${CLAUDE_PROJECT_DIR:-.}/.claude/helpers/hook-handler.cjs\" session-end'", - .claude/settings.json, line 90
"command": "sh -c 'exec node \"${CLAUDE_PROJECT_DIR:-.}/.claude/helpers/auto-memory-hook.mjs\" sync'", - .claude/settings.json, line 102
"command": "sh -c 'exec node \"${CLAUDE_PROJECT_DIR:-.}/.claude/helpers/hook-handler.cjs\" compact-manual'"
and 52 more places
Sends data to these websites: awscli.amazonaws.com, sdk.cloud.google.com, login.microsoftonline.com, 169.254.169.254, metadata.google.internal, management.azure.com
The author does not mention this.
Found in 16 places.
Show 13 more
- skills/ag-cloud-penetration-testing/SKILL.md, line 72
curl "https://login.microsoftonline.com/target.com/v2.0/.well-known/openid-configuration" - skills/ag-cloud-penetration-testing/SKILL.md, line 268
curl http://169.254.169.254/latest/meta-data/ - skills/ag-cloud-penetration-testing/SKILL.md, line 269
curl http://169.254.169.254/latest/meta-data/iam/security-credentials/ - skills/ag-cloud-penetration-testing/SKILL.md, line 272
TOKEN=$(curl -X PUT "http://169.254.169.254/latest/api/token" -H "X-aws-ec2-metadata-token-ttl-seconds: 21600") - skills/ag-cloud-penetration-testing/SKILL.md, line 273
curl http://169.254.169.254/latest/meta-data/profile -H "X-aws-ec2-metadata-token: $TOKEN" - skills/ag-cloud-penetration-testing/SKILL.md, line 344
curl "http://metadata.google.internal/computeMetadata/v1/?recursive=true&alt=text" -H "Metadata-Flavor: Google" - skills/ag-cloud-penetration-testing/SKILL.md, line 347
curl http://metadata.google.internal/computeMetadata/v1/instance/service-accounts/default/scopes -H 'Metadata-Flavor:Google' - skills/ag-cloud-penetration-testing/SKILL.md, line 388
| Metadata | `curl http://169.254.169.254/latest/meta-data/` | - skills/ag-cloud-penetration-testing/SKILL.md, line 400
| Metadata | `curl -H "Metadata-Flavor: Google" http://metadata.google.internal/...` | - skills/ag-cloud-penetration-testing/references/advanced-cloud-scripts.md, line 88
$authResponse = Invoke-RestMethod ` - skills/ag-cloud-penetration-testing/references/advanced-cloud-scripts.md, line 107
$Tokens = Invoke-RestMethod ` - skills/ag-cloud-penetration-testing/references/advanced-cloud-scripts.md, line 120
Invoke-WebRequest -Uri 'http://169.254.169.254/metadata/identity/oauth2/token?api-version=2018-02-01&resource=https://management.azure.com' -Method GET -Headers - skills/ag-cloud-penetration-testing/references/advanced-cloud-scripts.md, line 123
$instance = Invoke-WebRequest -Uri 'http://169.254.169.254/metadata/instance?api-version=2018-02-01' -Method GET -Headers @{Metadata="true"} -UseBasicParsing
Downloads and installs other software
The author does not mention this. It runs automatically when the plugin is installed.
Found in 11 places.
Show 8 more
Changes files outside its own folder
The author does not mention this.
Found in 1 place.
Reads your saved credentials, such as SSH keys or .env files
This is disclosed by the author in the skill's SKILL.md or README. It runs automatically when the plugin is installed.
Found in 1 place.
Safer alternatives
Low-risk skills in the same category (coding) that look related. Check that one does what you need.
Install
Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.
if [ -e ~/.agents/skills/'cloud-penetration-testing' ] || [ -L ~/.agents/skills/'cloud-penetration-testing' ]; then echo 'A skill folder named cloud-penetration-testing already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/anubhavg-icpl/vibe' "$d" && git -C "$d" checkout --quiet 'd51e7ac9a34111cd2e63daed83c2198f91570050' -- 'skills/ag-cloud-penetration-testing' && mkdir -p ~/.agents/skills && cp -R "$d"/'skills/ag-cloud-penetration-testing' ~/.agents/skills/'cloud-penetration-testing' && rm -rf "$d"; fi
Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'cloud-penetration-testing' ~/.claude/skills/'cloud-penetration-testing' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.
Badge for your README
The badge for anubhavg-icpl/vibe shows the score of its lowest-scoring skill.
[](https://zalavijaysinh.github.io/skilltrust/repos/anubhavg-icpl/vibe/)
Score history
| Date | Version | Score |
|---|
| 2026-11-08 | d51e7ac | 55 |