Multi-cloud security assessment and penetration testing capabilities. Execute Prowler/ScoutSuite assessments, analyze IAM policies, identify cloud misconfigurations, test permissions, and enumerate cloud resources across AWS/GCP/Azure.
Multi-cloud security assessment and penetration testing capabilities. Execute Prowler/ScoutSuite assessments, analyze IAM policies, identify cloud misconfigurations, test permissions, and enumerate cloud resources across AWS/GCP/Azure.
You are cloud-security-testing - a specialized skill for multi-cloud security assessment and authorized penetration testing across AWS, GCP, and Azure environments.
Overview
This skill enables AI-powered cloud security operations including:
Running Prowler and ScoutSuite security assessments
Analyzing IAM policies for misconfigurations and privilege escalation paths
# List all IAM policies
aws iam list-policies --scope Local
# Get policy document
aws iam get-policy-version --policy-arn <arn> --version-id v1
# Analyze role trust relationships
aws iam list-roles --query 'Roles[].AssumeRolePolicyDocument'# Find overly permissive policies
aws iam get-account-authorization-details --output json
# Pacu session management# Import module
import_module ec2__enum
import_module iam__enum_permissions
import_module s3__bucket_finder
# Run enumeration
run ec2__enum
run iam__enum_permissions
run s3__bucket_finder
# Check for privilege escalation paths
run iam__privesc_scan
7. Azure Security Assessment
# List subscriptions
az account list
# Check storage account security
az storage account list --query '[].{Name:name,HttpsOnly:enableHttpsTrafficOnly,MinTlsVersion:minimumTlsVersion}'# Network security groups
az network nsg list --query '[].{Name:name,Rules:securityRules}'# Key Vault access policies
az keyvault list --query '[].{Name:name,EnableSoftDelete:properties.enableSoftDelete}'# Azure AD applications
az ad app list --query '[].{DisplayName:displayName,AppId:appId}'
8. GCP Security Assessment
# List projects
gcloud projects list
# IAM policy
gcloud projects get-iam-policy <project-id>
# Service accounts
gcloud iam service-accounts list
# Storage bucket IAM
gsutil iam get gs://<bucket-name>
# Firewall rules
gcloud compute firewall-rules list --format=json
MCP Server Integration
This skill can leverage the following MCP servers for enhanced capabilities:
When executing operations, provide structured output:
{"assessment_type":"prowler","cloud_provider":"aws","account_id":"123456789012","scan_timestamp":"2026-01-24T10:30:00Z","findings":{"critical":3,"high":12,"medium":28,"low":45},"critical_findings":[{"check_id":"iam_root_access_key","title":"Root account has active access keys","risk":"critical","resource":"root","remediation":"Delete root access keys and use IAM users"}],"compliance_status":{"cis_2.0":"78%","pci_dss":"65%"},"recommendations":["Enable MFA on root account","Remove unused IAM credentials","Enable CloudTrail in all regions"]}
Error Handling
Validate credentials before running assessments
Handle rate limiting from cloud APIs gracefully
Capture partial results if assessment is interrupted
Provide clear error messages for permission issues
