hunt-cloud-misconfig

92 / 100 · Low risk

Fine to try. Some of what it can do is expected: a security skill usually runs scanners and checks websites.

By elementalsouls/Claude-BugHunter (GitHub) · security · 5,515 stars · scanned at commit d5dcc53

Hunt cloud / infrastructure misconfigurations. AWS: public S3 buckets (s3:GetObject anonymous), permissive bucket policies (PutObjectAcl public-write), exposed CloudFront origin, public Lambda function URL, public RDS snapshot, IAM credentials in JS bundles, AWS metadata accessible via SSRF. GCP: public GCS buckets, exposed Cloud Run services, leaked service account JSON. Azure: public blob containers, exposed Function App. (Kubernetes/Docker exposure is owned by hunt-k8s; CI/CD pipeline attack…

Works with any agent that supports SKILL.md skills.

What this skill can do

Sends data to these websites: target-name.s3.amazonaws.com, $name.s3.amazonaws.com, target-app.firebaseio.com

This is disclosed by the author in the skill's SKILL.md or README. Expected for a security skill.

Found in 4 places.

skills/hunt-cloud-misconfig/SKILL.md, line 13curl -s "https://TARGET-NAME.s3.amazonaws.com/?max-keys=10"
skills/hunt-cloud-misconfig/SKILL.md, line 18curl -s -o /dev/null -w "$name: %{http_code}\n" "https://$name.s3.amazonaws.com/"
skills/hunt-cloud-misconfig/SKILL.md, line 22curl -s "https://TARGET-APP.firebaseio.com/.json" # read

Show 1 more

skills/hunt-cloud-misconfig/SKILL.md, line 23curl -s -X PUT "https://TARGET-APP.firebaseio.com/test.json" -d '"pwned"' # write

Runs commands on your computer

The author does not mention this. Expected for a security skill.

Found in 6 places.

skills/hunt-cloud-misconfig/SKILL.md, line 13curl -s "https://TARGET-NAME.s3.amazonaws.com/?max-keys=10"
skills/hunt-cloud-misconfig/SKILL.md, line 28http://169.254.169.254/latest/meta-data/iam/security-credentials/ # role name
skills/hunt-cloud-misconfig/SKILL.md, line 52docker run -d --name lab-localstack -p 14566:4566 localstack/localstack:3.0

Show 3 more

skills/hunt-cloud-misconfig/SKILL.md, line 100grep -REn "cwr\(['\"]init['\"]|from\s+['\"]aws-rum-web['\"]|new\s+AwsRum\(" .
skills/hunt-cloud-misconfig/SKILL.md, line 120aws cognito-identity get-id \
skills/hunt-cloud-misconfig/SKILL.md, line 137aws rum put-rum-events \

Install

Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.

if [ -e ~/.agents/skills/'hunt-cloud-misconfig' ] || [ -L ~/.agents/skills/'hunt-cloud-misconfig' ]; then echo 'A skill folder named hunt-cloud-misconfig already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/elementalsouls/Claude-BugHunter' "$d" && git -C "$d" checkout --quiet 'd5dcc5347675ed431488e0a0e46749e4918aa194' -- 'skills/hunt-cloud-misconfig' && mkdir -p ~/.agents/skills && cp -R "$d"/'skills/hunt-cloud-misconfig' ~/.agents/skills/'hunt-cloud-misconfig' && rm -rf "$d"; fi

Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'hunt-cloud-misconfig' ~/.claude/skills/'hunt-cloud-misconfig' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.

Badge for your README

The badge for elementalsouls/Claude-BugHunter shows the score of its lowest-scoring skill.

SkillTrust badge for elementalsouls/Claude-BugHunter

[![SkillTrust](https://zalavijaysinh.github.io/skilltrust/badges/elementalsouls/Claude-BugHunter.svg)](https://zalavijaysinh.github.io/skilltrust/repos/elementalsouls/Claude-BugHunter/)

Score history

Date	Version	Score
2026-11-10	`d5dcc53`	92
2026-11-08	`42a3ab1`	92
2026-11-06	`3e71af0`	92