Individual skill
cloud-containers
Cloud and container security testing - AWS, Azure, GCP, Docker, and Kubernetes misconfigurations and exploitation.
skills/cloud-containers/SKILL.md
Source commit 95fdc128af4ca1ae16b3226f9430f1bad97b0656
What was checked
- Matches the observed repository HEAD
- Yes
- Scanner rules are current
- Yes
- Repository scan complete
- No
- Skill scan complete
- No
- Observed behavior
- Network or broad shell
- Last checked
- Nov 5, 2026
These are observations at the recorded commit, not a guarantee of safety. Review the source before running it.
Install this skill
Choose an agent in your Stack or copy a command below. Commands fetch the pinned commit and copy only this skill directory. Existing destinations are refused. Copying a command does not install anything.
An install command is unavailable: current rules, complete repository and skill scans, an eligible behavior level and a permitted license are required.
Repository context
- Repository stars (not skill ratings)
- 610
- Repository last updated
- Jul 29, 2026
- License
- MIT
Observed agent integration: No specific integration evidence. Standard SKILL.md installation does not imply verified compatibility.
- bounty-hunters Repository topic
- hackerone Repository topic
- pentest Repository topic
- pentest-tool Repository topic
- security Repository topic
- security-research Repository topic
- security-tools Repository topic
- devops Derived category
- security Derived category
- testing Derived category
- devops-containers Derived category
Files and excerpt
File metadata and permitted, redacted excerpts come from the recorded scan. Source links are pinned to that commit.
Browse files
SKILL.mdcore · 1,908 bytesreference/INDEX.mddoc · 1,656 bytesreference/cloud-containers-principles.mddoc · 4,147 bytesreference/posture/INDEX.mddoc · 7,356 bytesreference/posture/catalog/cis-oci-foundations-v3.1.1.jsonasset · 262,724 bytesreference/posture/catalog/mcsb-azure-foundations-v1.jsonasset · 388,960 bytesreference/posture/catalog/nsa-cisa-k8s-hardening-1.2.jsonasset · 246,453 bytesreference/posture/posture-collect.mddoc · 5,455 bytesreference/scenarios/aws/minio-self-hosted-s3.mddoc · 3,489 bytesreference/scenarios/aws/moto-mock-aws-quirks.mddoc · 10,942 bytesreference/scenarios/aws/recon-and-iam-privesc.mddoc · 11,436 bytesreference/scenarios/aws/serverless-and-saas.mddoc · 5,167 bytesreference/scenarios/azure/recon-and-storage.mddoc · 7,233 bytesreference/scenarios/docker/container-recon-and-escape.mddoc · 4,961 bytesreference/scenarios/gcp/recon-and-iam.mddoc · 5,063 bytesreference/scenarios/kubernetes/recon-and-rbac.mddoc · 7,768 bytes
Read excerpt
# Cloud & Containers
Test cloud infrastructure and container environments for security misconfigurations and exploitation paths.
## Techniques
| Platform | Key Vectors |
|----------|-------------|
| **AWS** | S3 bucket exposure, IAM misconfig, metadata service, Lambda abuse |
| **Azure** | Blob storage, RBAC flaws, managed identity, App Service misconfig |
| **GCP** | Cloud Storage, service account keys, metadata server, IAM |
| **Docker** | Container escape, privileged mode, socket exposure, image vulnerabilities |
| **Kubernetes** | RBAC bypass, secret exposure, pod escape, API server access |
