← All skills
aws-penetration-testing
75 / 100 · Review before installing
Check before installing. Some of what it can do is expected: a devops skill usually runs commands, installs tools and uses cloud credentials.
By kursku/skills (GitHub) · devops · 128 stars · scanned at commit 346c313
This skill should be used when the user asks to "pentest AWS", "test AWS security", "enumerate IAM", "exploit cloud infrastructure", "AWS privilege escalation", "S3 bucket testing...
Works with any agent that supports SKILL.md skills.
What this skill can do
Downloads and installs other software
The author does not mention this. Expected for a devops skill.
Found in 4 places.
Show 1 more
Runs commands on your computer
The author does not mention this. Expected for a devops skill.
Found in 18 places.
Show 15 more
- packs/global-skillshare-import/wave-002/aws-penetration-testing/SKILL.md, line 118
TOKEN=$(curl -X PUT -H "X-aws-ec2-metadata-token-ttl-seconds: 21600" \ - packs/global-skillshare-import/wave-002/aws-penetration-testing/SKILL.md, line 130
/proc/self/environ - packs/global-skillshare-import/wave-002/aws-penetration-testing/SKILL.md, line 158
aws iam create-access-key --user-name target_user - packs/global-skillshare-import/wave-002/aws-penetration-testing/SKILL.md, line 164
aws iam attach-user-policy --user-name my_username \ - packs/global-skillshare-import/wave-002/aws-penetration-testing/SKILL.md, line 171
aws iam put-user-policy --user-name my_username \ - packs/global-skillshare-import/wave-002/aws-penetration-testing/SKILL.md, line 193
aws lambda update-function-code --function-name target_function \ - packs/global-skillshare-import/wave-002/aws-penetration-testing/SKILL.md, line 205
./bucket_finder.rb wordlist.txt - packs/global-skillshare-import/wave-002/aws-penetration-testing/SKILL.md, line 217
aws s3 ls - packs/global-skillshare-import/wave-002/aws-penetration-testing/SKILL.md, line 238
aws lambda list-functions - packs/global-skillshare-import/wave-002/aws-penetration-testing/SKILL.md, line 256
aws ssm describe-instance-information - packs/global-skillshare-import/wave-002/aws-penetration-testing/SKILL.md, line 276
aws ec2 create-snapshot --volume-id vol-xxx --description "Audit" - packs/global-skillshare-import/wave-002/aws-penetration-testing/SKILL.md, line 297
secretsdump.py -system ./SYSTEM -ntds ./ntds.dit local - packs/global-skillshare-import/wave-002/aws-penetration-testing/SKILL.md, line 307
git clone https://github.com/NetSPI/aws_consoler - packs/global-skillshare-import/wave-002/aws-penetration-testing/SKILL.md, line 321
aws cloudtrail delete-trail --name trail_name - packs/global-skillshare-import/wave-002/aws-penetration-testing/SKILL.md, line 375
https://app.com/proxy?url=http://169.254.169.254/latest/meta-data/iam/security-credentials/
Sends data to these websites: 169.254.169.254, api_id.execute-api.region.amazonaws.com
The author does not mention this. Expected for a devops skill.
Found in 5 places.
Show 2 more
Safer alternatives
Low-risk skills in the same category (devops) that look related. Check that one does what you need.
Install
Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.
if [ -e ~/.agents/skills/'aws-penetration-testing' ] || [ -L ~/.agents/skills/'aws-penetration-testing' ]; then echo 'A skill folder named aws-penetration-testing already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/kursku/skills' "$d" && git -C "$d" checkout --quiet '346c313fd2ec241a088c68274da26c538422568b' -- 'packs/global-skillshare-import/wave-002/aws-penetration-testing' && mkdir -p ~/.agents/skills && cp -R "$d"/'packs/global-skillshare-import/wave-002/aws-penetration-testing' ~/.agents/skills/'aws-penetration-testing' && rm -rf "$d"; fi
Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'aws-penetration-testing' ~/.claude/skills/'aws-penetration-testing' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.
Badge for your README
The badge for kursku/skills shows the score of its lowest-scoring skill.

[](https://zalavijaysinh.github.io/skilltrust/repos/kursku/skills/)
Score history
| Date | Version | Score |
|---|
| 2026-11-07 | 346c313 | 75 |