用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
直接命令不会经过审查 Prompt；运行前请先检查来源。
npx skills add https://github.com/microwind/ai-skills --skill cloud-config-analyzer命令会保持在同一行。复制前请横向滚动并检查完整内容。
想先保存到本地？可下载 SkillsMP 当前能够提供的文件。
基于 SOC 职业分类
正在显示 SKILL.md
| name | cloud-config-analyzer |
| description | Enhanced skill for cloud-config-analyzer |
| license | MIT |
详细的分析和验证 cloud-config-analyzer.
核心原则: Misconfigured cloud 资源 leak data, waste money, and expose 安全 漏洞.
始终:
触发短语:
Problem:
S3 bucket with public read/write access
Consequence:
- Data exposed to internet
- Anyone can download files
- Compliance violation
Solution:
Remove public ACLs, use bucket policies
Problem:
RDS database without encryption at rest
Consequence:
- Data exposed if disk stolen
- Compliance violation
- Regulatory fines
Solution:
Enable encryption at rest
Problem:
Security group allows all inbound traffic
Consequence:
- Exposed to the internet
- Unnecessary security risk
- Compliance issue
Solution:
Restrict to specific ports/IPs
| 问题 | 解决方案 |
|---|---|
| "Not sure where to start" | 识别 the specific issue using the 常见问题 section above. |
| "性能 is poor" | Profile first to 识别 bottleneck before optimizing. |
| "Not sure about 最佳实践" | 检查 the 验证检查清单 to understand quality standards. |
❌ Public storage buckets (data leak) ❌ Wide-open 安全 groups (安全 risk) ❌ Unencrypted sensitive data ❌ Root account for everything (IAM issues) ❌ No backup strategy ❌ Oversized instances (wasted money)