Agent skill

Cloud Misconfig Auditor

by criptogus in criptogus/agent-evolve-network

Audits AWS, GCP and Azure environments (and matching IaC) for excessive permissions, public exposure, weak encryption defaults and missing logging.

CC-BY-SA-4.0Auto-check passedDevOps & Cloud

Install Cloud Misconfig Auditor

skills CLI

$ npx skills add criptogus/agent-evolve-network --skill cloud-misconfig-auditor -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI

$ gh skill install criptogus/agent-evolve-network cloud-misconfig-auditor --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy

$ git clone --depth 1 https://github.com/criptogus/agent-evolve-network.git skills-src && mkdir -p .claude/skills && cp -r skills-src/skills/cloud-misconfig-auditor .claude/skills/cloud-misconfig-auditor && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Paste into Claude Code

Install the "cloud-misconfig-auditor" agent skill from https://github.com/criptogus/agent-evolve-network/tree/main/skills/cloud-misconfig-auditor into .claude/skills/cloud-misconfig-auditor/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "cloud-misconfig-auditor", then confirm the skill loads.

Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

$skill-installer

$skill-installer install https://github.com/criptogus/agent-evolve-network/tree/main/skills/cloud-misconfig-auditor

Type this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.

skills CLI

$ npx skills add criptogus/agent-evolve-network --skill cloud-misconfig-auditor -a codex

Project install goes to .agents/skills/; add -g for ~/.codex/skills/.

GitHub CLI

$ gh skill install criptogus/agent-evolve-network cloud-misconfig-auditor --agent codex

Project scope by default (.agents/skills/); add --scope user for a personal install.

Manual copy

$ git clone --depth 1 https://github.com/criptogus/agent-evolve-network.git skills-src && mkdir -p .agents/skills && cp -r skills-src/skills/cloud-misconfig-auditor .agents/skills/cloud-misconfig-auditor && rm -rf skills-src

Use ~/.agents/skills/ instead of .agents/skills for a personal install.

Codex skills documentation · loads skills from .agents/skills/

Paste into Codex

Install the "cloud-misconfig-auditor" agent skill from https://github.com/criptogus/agent-evolve-network/tree/main/skills/cloud-misconfig-auditor into .agents/skills/cloud-misconfig-auditor/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "cloud-misconfig-auditor", then confirm the skill loads.

Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

skills CLI

$ npx skills add criptogus/agent-evolve-network --skill cloud-misconfig-auditor -a cursor

Project install goes to .agents/skills/; add -g for ~/.cursor/skills/.

GitHub CLI

$ gh skill install criptogus/agent-evolve-network cloud-misconfig-auditor --agent cursor

Project scope by default (.agents/skills/); add --scope user for a personal install.

Manual copy

$ git clone --depth 1 https://github.com/criptogus/agent-evolve-network.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/skills/cloud-misconfig-auditor .cursor/skills/cloud-misconfig-auditor && rm -rf skills-src

Use ~/.cursor/skills/ instead of .cursor/skills for a personal install.

Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/

Paste into Cursor

Install the "cloud-misconfig-auditor" agent skill from https://github.com/criptogus/agent-evolve-network/tree/main/skills/cloud-misconfig-auditor into .cursor/skills/cloud-misconfig-auditor/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "cloud-misconfig-auditor", then confirm the skill loads.

Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

gemini skills install

$ gemini skills install https://github.com/criptogus/agent-evolve-network.git --path skills/cloud-misconfig-auditor

--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.

skills CLI

$ npx skills add criptogus/agent-evolve-network --skill cloud-misconfig-auditor -a gemini-cli

Project install goes to .agents/skills/; add -g for ~/.gemini/skills/.

GitHub CLI

$ gh skill install criptogus/agent-evolve-network cloud-misconfig-auditor --agent gemini-cli

Project scope by default (.agents/skills/); add --scope user for a personal install.

Manual copy

$ git clone --depth 1 https://github.com/criptogus/agent-evolve-network.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/skills/cloud-misconfig-auditor .gemini/skills/cloud-misconfig-auditor && rm -rf skills-src

Use ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.

Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/

Paste into Gemini CLI

Install the "cloud-misconfig-auditor" agent skill from https://github.com/criptogus/agent-evolve-network/tree/main/skills/cloud-misconfig-auditor into .gemini/skills/cloud-misconfig-auditor/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "cloud-misconfig-auditor", then confirm the skill loads.

Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

GitHub CLI

$ gh skill install criptogus/agent-evolve-network cloud-misconfig-auditor

Installs for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).

skills CLI

$ npx skills add criptogus/agent-evolve-network --skill cloud-misconfig-auditor -a github-copilot

Project install goes to .agents/skills/; add -g for ~/.copilot/skills/.

Manual copy

$ git clone --depth 1 https://github.com/criptogus/agent-evolve-network.git skills-src && mkdir -p .github/skills && cp -r skills-src/skills/cloud-misconfig-auditor .github/skills/cloud-misconfig-auditor && rm -rf skills-src

Use ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.

GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/

Paste into GitHub Copilot

Install the "cloud-misconfig-auditor" agent skill from https://github.com/criptogus/agent-evolve-network/tree/main/skills/cloud-misconfig-auditor into .github/skills/cloud-misconfig-auditor/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "cloud-misconfig-auditor", then confirm the skill loads.

GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

skills CLI

$ npx skills add criptogus/agent-evolve-network --skill cloud-misconfig-auditor -a opencode

OpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.

GitHub CLI

$ gh skill install criptogus/agent-evolve-network cloud-misconfig-auditor --agent opencode

Project scope by default (.agents/skills/); add --scope user for a personal install.

Manual copy

$ git clone --depth 1 https://github.com/criptogus/agent-evolve-network.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/skills/cloud-misconfig-auditor .opencode/skills/cloud-misconfig-auditor && rm -rf skills-src

Use ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.

OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/

Paste into OpenCode

Install the "cloud-misconfig-auditor" agent skill from https://github.com/criptogus/agent-evolve-network/tree/main/skills/cloud-misconfig-auditor into .opencode/skills/cloud-misconfig-auditor/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "cloud-misconfig-auditor", then confirm the skill loads.

OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

Facts

Skill name: cloud-misconfig-auditor
GitHub stars: 288
Token cost: ~965 tokens
SKILL.md length: 256 words
Files: 1
Skills in repo: 107
Repo updated: Sep 9, 2026
First seen: Oct 7, 2026
Licence: CC-BY-SA-4.0

At a glance

Audits AWS, GCP and Azure environments (and matching IaC) for excessive permissions, public exposure, weak encryption defaults and missing logging.

The user asks for cloud misconfiguration auditor work
SKILL.md covers Instructions, Always, Never and Input / output contract, plus 2 more sections
Calls npx and terraform
Tasks that involve Cloud security

What it does

Cloud Misconfig Auditor is an agent skill from criptogus/agent-evolve-network. Audits AWS, GCP and Azure environments (and matching IaC) for excessive permissions, public exposure, weak encryption defaults and missing logging. Use when the user asks for cloud misconfiguration auditor work, or mentions cloud, misconfig, auditor.

Its SKILL.md is about 970 tokens, which your agent loads only when the skill is triggered. It is a single SKILL.md file with no bundled scripts.

It sits in DevOps & Cloud, covering Cloud security and Infrastructure as code. It works with Amazon Web Services, Google Cloud and Microsoft Azure. The licence is CC-BY-SA-4.0.

When your agent uses it

The user asks for cloud misconfiguration auditor work
Tasks that involve Cloud security
Tasks that involve Infrastructure as code

Example prompts

“Use the cloud-misconfig-auditor skill to audit AWS, GCP and Azure environments (and matching IaC) for excessive permissions, public exposure, weak…”
“/cloud-misconfig-auditor”

Requirements

Node.js

What it can do on your machine

Read from SKILL.md and the folder at commit d19b920. It shows what the files ask for, not the result of running them.

Tool permissions
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
Runs code
Shell commands in SKILL.md call:
- npx
- terraform
From the folder's file list and the shell code blocks in SKILL.md.
Network
Links to these hosts (documentation or services it may open):
- superagentskill.com
From URLs in SKILL.md, links to its own repository left out.
Credentials
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Cloud Misconfig Auditor loads about 965 tokens when it runs. Until then it costs about 69 tokens; SKILL.md has 256 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it: ~69
When it runs · the whole SKILL.md, loaded when a task matches: ~965

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

The full file from criptogus/agent-evolve-network at commit d19b920, republished under its CC-BY-SA-4.0 licence (© criptogus). 256 words, ~965 tokens.

Download SKILL.mdSave it as .claude/skills/cloud-misconfig-auditor/SKILL.md (or your agent's skills folder).

name: cloud-misconfig-auditor
description: Audits AWS, GCP and Azure environments (and matching IaC) for excessive permissions, public exposure, weak encryption defaults and missing logging. Use when the user asks for cloud misconfiguration auditor work, or mentions cloud, misconfig, auditor.
version: 0.1.0
license: CC-BY-SA-4.0
homepage: https://superagentskill.com/marketplace/cloud-misconfig-auditor
source: Super Agent Skill (SAK)

Cloud Misconfiguration Auditor

Use to review a cloud account or its Terraform / CloudFormation / Pulumi source for the most common, high-impact misconfigurations: wildcard IAM, public S3/GCS/Blob storage, 0.0.0.0/0 ingress, unencrypted volumes, disabled flow logs, root or owner accounts without MFA. Produces a prioritized remediation list mapped to CIS Benchmarks where relevant.

Instructions

You are a cloud security engineer. Begin every audit by listing in-scope accounts, regions and the data sources you will use (live API, IaC, exported config). For each finding output: cloud, service, severity, control reference (CIS/Benchmark), evidence snippet, remediation snippet. Group output by severity, highest first. Never run state-changing commands in the suggested remediation; always show a terraform plan / dry-run step first.

Always

Cite the CIS Benchmark or vendor control for every finding when one applies.
Provide a remediation snippet, not just an explanation.
Suggest dry-run before any state-changing command.

Never

Recommend disabling logging, encryption or MFA as a workaround.
Run destructive commands without confirmation.
Invent resource names that are not in the supplied evidence.

Input / output contract

Input:

json

{
  "type": "object",
  "properties": {
    "cloud": {
      "type": "string",
      "enum": [
        "aws",
        "gcp",
        "azure",
        "multi"
      ]
    },
    "sources": {
      "type": "array",
      "items": {
        "type": "string"
      }
    },
    "scope": {
      "type": "string"
    }
  },
  "required": [
    "cloud",
    "sources"
  ]
}

Output:

json

{
  "type": "object",
  "properties": {
    "report_markdown": {
      "type": "string"
    }
  },
  "required": [
    "report_markdown"
  ]
}

Examples

Public S3 bucket

Input:

cloud: aws
sources: ["aws s3api list-buckets output"]
scope: "prod account 1234"

Expected output:

## Critical
- **AWS / S3 — bucket `acme-public-logs`** (CIS 2.1.1)
  Evidence: `BlockPublicAcls=false, IgnorePublicAcls=false`
  Remediation:

aws s3api put-public-access-block --bucket acme-public-logs
--public-access-block-configuration BlockPublicAcls=true,IgnorePublicAcls=true,BlockPublicPolicy=true,RestrictPublicBuckets=true

Overly permissive IAM role

Input:

cloud: aws
sources: ["aws iam get-role-policy output"]
scope: "prod account 1234"

Expected output:

## High
- **AWS / IAM — role `acme-ec2-app`** (CIS 1.16 — least privilege)
  Evidence: inline policy grants `s3:*` on `Resource: "*"`.
  Remediation:

aws iam put-role-policy --role-name acme-ec2-app
--policy-name s3-scoped --policy-document file://least-priv.json

Where `least-priv.json` restricts `Action` to the buckets actually used.

Trust & telemetry

This skill is graded on the Super Agent Skill network: format, substance and adversarial (prompt-injection) testing produce a public Trust Score.

Trust Score & evidence: https://superagentskill.com/marketplace/trust/cloud-misconfig-auditor
Skill page: https://superagentskill.com/marketplace/cloud-misconfig-auditor
Live version (always current) via MCP: https://superagentskill.com/api/mcp

Reinstall or update with npx skills update, or pull the live graded version with npx super-agent install cloud-misconfig-auditor.

Files

Just SKILL.md in skills/cloud-misconfig-auditor of criptogus/agent-evolve-network.

Open the folder on GitHubat commit d19b920

Compare with similar skills

Cloud Misconfig Auditor next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Cloud Misconfig Auditor compared with similar skills
Skill	Stars	Used in	Tokens	Auto-check	Licence	Repo updated
Cloud Misconfig Auditor this skillcriptogus/agent-evolve-network	288	—	~965	Automated safety check: Pass	CC-BY-SA-4.0	27 days ago
Agent Bom Scan InfraLeoYeAI/openclaw-master-skills	2.2k	—	~1.5k	Automated safety check: Pass	Apache-2.0	2 mo ago
Conducting Cloud Incident Responsemukul975/Anthropic-Cybersecurity-Skills	34k	—	~3k	Automated safety check: Pass	Apache-2.0	1 mo ago
Terravision Cloud Diagramspatrickchugh/terravision	1.6k	—	~5.6k	Automated safety check: Notes	AGPL-3.0-only	today
TerrasharkLukasNiessen/terrashark	715	—	~843	Automated safety check: Pass	MIT	5 days ago
FrugalyuanboP/frugal	198	—	~2.1k	Automated safety check: Pass	MIT	2 mo ago

Similar skills

Agent Bom Scan Infra
LeoYeAI/openclaw-master-skills
Scan infrastructure-as-code, cloud configurations, and find secrets.
2.2k GitHub stars~1.5k tokensUpdated 2 mo ago
DevOps & CloudAuto-check passed
Conducting Cloud Incident Response
mukul975/Anthropic-Cybersecurity-Skills
Respond to security incidents in AWS, Azure, and GCP via identity-based containment, cloud-native log analysis (CloudTrail, Azure Activity Logs, GCP Audit Logs), resource isolation, and forensic…
34k GitHub stars~3k tokensUpdated 1 mo ago
DevOps & CloudAuto-check passed
Terravision Cloud Diagrams
patrickchugh/terravision
Draw cloud architecture diagrams for AWS, Azure or GCP with the official provider icon sets, using TerraVision.
1.6k GitHub stars~5.6k tokensUpdated today
DevOps & CloudAuto-check: notes
Terrashark
LukasNiessen/terrashark
Prevent Terraform/OpenTofu hallucinations by diagnosing and fixing failure modes: identity churn, secret exposure, blast-radius mistakes, CI drift, and compliance gate gaps.
715 GitHub stars~843 tokensUpdated 5 days ago
DevOps & CloudAuto-check passed
Frugal
yuanboP/frugal
Cloud cost awareness for agents. An agent skill from yuanboP/frugal.
198 GitHub stars~2.1k tokensUpdated 2 mo ago
DevOps & CloudAuto-check passed
Provider Verification
mondoohq/mql
Verify mql provider resource/field changes against real cloud infrastructure.
411 GitHub stars~3.7k tokensUpdated today
DevOps & CloudAuto-check passed

More from criptogus/agent-evolve-network

All 107 skills in this repo

Brand Research
criptogus/agent-evolve-network
Kickoff research for a brand you haven't worked on before — web research, existing-ad analysis from the Meta Ad Library, editorial-grammar profiling, sourced + AI-generated brand assets, hook/CTA…
288 GitHub stars~3.9k tokensUpdated 27 days ago
Auto-check passed
Create Apple Notes Video Ad
criptogus/agent-evolve-network
Produce a 9:16 social-native ad recreating the iPhone Apple Notes typing experience — the note begins with 1–2 visible lines, then progressively types additional paragraphs character-by-character…
288 GitHub stars~4.9k tokensUpdated 27 days ago
Auto-check passed
Create Chatgpt Video Ad
criptogus/agent-evolve-network
Produce a 9:16 social-native ad that recreates a ChatGPT mobile chat — user types in the composer with the iOS keyboard visible, taps send, keyboard slides down, header right-cluster swaps…
288 GitHub stars~5k tokensUpdated 27 days ago
Auto-check passed
Create Imessage Video Ad
criptogus/agent-evolve-network
Produce a 9:16 social-native ad that recreates an iMessage conversation reveal — bubbles pop in over time, composer types char-by-char, real Apple iMessage SFX hit on every send/receive, music bed…
288 GitHub stars~7.4k tokensUpdated 27 days ago
Auto-check passed
Cloudflare Workers Expert
criptogus/agent-evolve-network
Builds and debugs Cloudflare Workers, Durable Objects, KV, R2, D1, and Queues with edge-correct patterns.
288 GitHub stars~619 tokensUpdated 27 days ago
Auto-check passed
Code Reviewer
criptogus/agent-evolve-network
Reviews a code diff and returns prioritized, actionable feedback grouped by severity.
288 GitHub stars~820 tokensUpdated 27 days ago
Auto-check passed

Works with

Questions about Cloud Misconfig Auditor

What does Cloud Misconfig Auditor do?

Audits AWS, GCP and Azure environments (and matching IaC) for excessive permissions, public exposure, weak encryption defaults and missing logging. Cloud Misconfig Auditor is an agent skill from criptogus/agent-evolve-network. Audits AWS, GCP and Azure environments (and matching IaC) for excessive permissions, public exposure, weak encryption defaults and missing logging.

When should I use Cloud Misconfig Auditor?

Cloud Misconfig Auditor fits situations like: the user asks for cloud misconfiguration auditor work; tasks that involve Cloud security; tasks that involve Infrastructure as code.

How do I install Cloud Misconfig Auditor in Claude Code?

Run `npx skills add criptogus/agent-evolve-network --skill cloud-misconfig-auditor -a claude-code`. Or copy the skill folder (skills/cloud-misconfig-auditor in criptogus/agent-evolve-network) into .claude/skills/cloud-misconfig-auditor in your project. Claude Code loads it when a task matches its description.

How do I install Cloud Misconfig Auditor in Codex?

Run `npx skills add criptogus/agent-evolve-network --skill cloud-misconfig-auditor -a codex`. Or copy the skill folder (skills/cloud-misconfig-auditor in criptogus/agent-evolve-network) into .agents/skills/cloud-misconfig-auditor in your project. Codex loads it when a task matches its description.

Can I use Cloud Misconfig Auditor in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add criptogus/agent-evolve-network --skill cloud-misconfig-auditor -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/cloud-misconfig-auditor, .gemini/skills/cloud-misconfig-auditor, .github/skills/cloud-misconfig-auditor and .opencode/skills/cloud-misconfig-auditor in your project.

What does Cloud Misconfig Auditor need to run?

Going by SKILL.md and its folder, Cloud Misconfig Auditor needs the command-line tools its instructions call (npx and terraform). Our summary lists: Node.js.

Does Cloud Misconfig Auditor access the network?

SKILL.md names 1 domain. As links in the text: superagentskill.com. This is read from the text; nothing was executed.

Is Cloud Misconfig Auditor safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.

What licence does Cloud Misconfig Auditor use?

Cloud Misconfig Auditor is published under the CC-BY-SA-4.0 licence (declared in SKILL.md). It allows redistribution, so the full SKILL.md is shown on this page.

How many tokens does Cloud Misconfig Auditor use?

About 965 tokens (SKILL.md is roughly 3.9k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.

What are the alternatives to Cloud Misconfig Auditor?

Skills that share tags, products or a category with Cloud Misconfig Auditor: Agent Bom Scan Infra (LeoYeAI/openclaw-master-skills, 2.2k stars), Conducting Cloud Incident Response (mukul975/Anthropic-Cybersecurity-Skills, 34k stars), Terravision Cloud Diagrams (patrickchugh/terravision, 1.6k stars) and Terrashark (LukasNiessen/terrashark, 715 stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Cloud Misconfig Auditor?

criptogus (a GitHub user) maintains it in criptogus/agent-evolve-network, which has 288 GitHub stars. The repository holds 107 skills in this directory. The repository was last updated on September 9, 2026.

Source: criptogus/agent-evolve-network on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.

Install Cloud Misconfig Auditor

Facts

At a glance

What it does

When your agent uses it

Example prompts

Requirements

What it can do on your machine

Tool permissions

Runs code

Network

Credentials

Context cost

Safety

SKILL.md

Cloud Misconfiguration Auditor

Instructions

Always

Never

Input / output contract

Examples

Public S3 bucket

Overly permissive IAM role

Trust & telemetry

Files

Compare with similar skills

Similar skills

More from criptogus/agent-evolve-network

Related

Questions about Cloud Misconfig Auditor