← All skills
cloud-pivot-finder
92 / 100 · Low risk
Fine to try. Some of what it can do is expected: a security skill usually runs scanners and checks websites.
By Orizon-eu/claude-code-pentest (GitHub) · security · 31 stars · scanned at commit f1cf16f
Maps cloud infrastructure from domains and identifies pivot paths from external to cloud internals. Detects cloud providers, enumerates S3/GCS/Azure storage, finds subdomain takeover opportunities, discovers serverless functions, CI/CD exposure, and IaC leaks. Use when user asks for "cloud security", "S3 enumeration", "subdomain takeover", "cloud recon", "bucket enumeration", "cloud pivot", or provides domains hosted on AWS/GCP/Azure. For authorized testing only.
Works with any agent that supports SKILL.md skills.
What this skill can do
Runs commands on your computer
The author does not mention this. Expected for a security skill.
Found in 15 places.
Show 12 more
- cloud-pivot-finder/SKILL.md, line 77
python scripts/serverless_finder.py --domain {target_domain} - cloud-pivot-finder/SKILL.md, line 96
python scripts/cicd_finder.py --domain {target_domain} - cloud-pivot-finder/SKILL.md, line 110
python scripts/metadata_paths.py --recon-data {recon_json} - cloud-pivot-finder/SKILL.md, line 122
python scripts/cloud_report.py --project {name} - cloud-pivot-finder/scripts/cloud_detector.py, line 74
result = subprocess.run( - cloud-pivot-finder/scripts/cloud_detector.py, line 80
except (FileNotFoundError, subprocess.TimeoutExpired): - cloud-pivot-finder/scripts/cloud_detector.py, line 156
result = subprocess.run( - cloud-pivot-finder/scripts/cloud_detector.py, line 175
except (FileNotFoundError, subprocess.TimeoutExpired): - cloud-pivot-finder/scripts/serverless_finder.py, line 155
result = subprocess.run( - cloud-pivot-finder/scripts/serverless_finder.py, line 161
except (FileNotFoundError, subprocess.TimeoutExpired): - cloud-pivot-finder/scripts/takeover_scanner.py, line 158
result = subprocess.run( - cloud-pivot-finder/scripts/takeover_scanner.py, line 164
except (FileNotFoundError, subprocess.TimeoutExpired):
Connects to the internet
This is disclosed by the author in the skill's SKILL.md or README. Expected for a security skill.
Found in 18 places.
Show 15 more
- cloud-pivot-finder/scripts/cicd_finder.py, line 13
import urllib.request - cloud-pivot-finder/scripts/cicd_finder.py, line 236
req = urllib.request.Request(url, headers={"User-Agent": "orizon-recon/1.0"}) - cloud-pivot-finder/scripts/cicd_finder.py, line 238
with urllib.request.urlopen(req, timeout=timeout, context=ctx) as resp: - cloud-pivot-finder/scripts/cloud_detector.py, line 14
import urllib.request - cloud-pivot-finder/scripts/cloud_detector.py, line 127
req = urllib.request.Request(url, headers={"User-Agent": "orizon-recon/1.0"}) - cloud-pivot-finder/scripts/cloud_detector.py, line 129
with urllib.request.urlopen(req, timeout=5, context=ctx) as resp: - cloud-pivot-finder/scripts/metadata_paths.py, line 12
import urllib.request - cloud-pivot-finder/scripts/metadata_paths.py, line 161
req = urllib.request.Request(url, headers=headers) - cloud-pivot-finder/scripts/metadata_paths.py, line 163
with urllib.request.urlopen(req, timeout=timeout, context=ctx) as resp: - cloud-pivot-finder/scripts/serverless_finder.py, line 14
import urllib.request - cloud-pivot-finder/scripts/serverless_finder.py, line 134
req = urllib.request.Request(url, headers={"User-Agent": "orizon-recon/1.0"}) - cloud-pivot-finder/scripts/serverless_finder.py, line 136
with urllib.request.urlopen(req, timeout=timeout, context=ctx) as resp: - cloud-pivot-finder/scripts/takeover_scanner.py, line 14
import urllib.request - cloud-pivot-finder/scripts/takeover_scanner.py, line 193
req = urllib.request.Request(url, headers={ - cloud-pivot-finder/scripts/takeover_scanner.py, line 198
with urllib.request.urlopen(req, timeout=timeout, context=ctx) as resp:
Install
Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.
if [ -e ~/.agents/skills/'cloud-pivot-finder' ] || [ -L ~/.agents/skills/'cloud-pivot-finder' ]; then echo 'A skill folder named cloud-pivot-finder already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/Orizon-eu/claude-code-pentest' "$d" && git -C "$d" checkout --quiet 'f1cf16f691fbc5d87aa6ed421a945f1af3fc7af7' -- 'cloud-pivot-finder' && mkdir -p ~/.agents/skills && cp -R "$d"/'cloud-pivot-finder' ~/.agents/skills/'cloud-pivot-finder' && rm -rf "$d"; fi
Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'cloud-pivot-finder' ~/.claude/skills/'cloud-pivot-finder' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.
Badge for your README
The badge for Orizon-eu/claude-code-pentest shows the score of its lowest-scoring skill.
[](https://zalavijaysinh.github.io/skilltrust/repos/Orizon-eu/claude-code-pentest/)
Score history
| Date | Version | Score |
|---|
| 2026-11-07 | f1cf16f | 92 |