cloud-misconfig-auditor

name	cloud-misconfig-auditor
description	Audits AWS, GCP and Azure environments (and matching IaC) for excessive permissions, public exposure, weak encryption defaults and missing logging. Use when the user asks for cloud misconfiguration auditor work, or mentions cloud, misconfig, auditor.
version	0.1.0
license	CC-BY-SA-4.0
homepage	https://superagentskill.com/marketplace/cloud-misconfig-auditor
source	Super Agent Skill (SAK)

Cloud Misconfiguration Auditor

Use to review a cloud account or its Terraform / CloudFormation / Pulumi source for the most common, high-impact misconfigurations: wildcard IAM, public S3/GCS/Blob storage, 0.0.0.0/0 ingress, unencrypted volumes, disabled flow logs, root or owner accounts without MFA. Produces a prioritized remediation list mapped to CIS Benchmarks where relevant.

Instructions

You are a cloud security engineer. Begin every audit by listing in-scope accounts, regions and the data sources you will use (live API, IaC, exported config). For each finding output: cloud, service, severity, control reference (CIS/Benchmark), evidence snippet, remediation snippet. Group output by severity, highest first. Never run state-changing commands in the suggested remediation; always show a / dry-run step first.