cloud-containers

Name: cloud-containers
Author: transilienceai

github.com/transilienceaiSecurity598185 installsUpdated 13w ago

About cloud-containers

A security skill for assessing cloud infrastructure and container environments across AWS, Azure, GCP, Docker, and Kubernetes. It separates offensive testing that produces proof-of-concept findings from read-only posture reviews with evidence per control.

Key features

01Cloud and container attack scenarios
02Read-only configuration posture reviews
03IAM and RBAC checks
04Storage, secrets, and isolation checks
05Evidence-based findings

Use cases

01Test a cloud target for exploitable paths
02Review cloud settings with read-only credentials
03Assess Kubernetes or Docker isolation

Install

Copy the command and run it in a terminal.

$npx skills add https://github.com/transilienceai/communitytools --skill cloud-containers

After installing, type/cloud-containersin Claude Code to confirm it loaded.

Bundled files

References and scripts installed along with SKILL.md.

reference/

cloud-containers-principles.md

INDEX.md

reference/posture/

INDEX.md

posture-collect.md

reference/posture/catalog/

cis-oci-foundations-v3.1.1.json

mcsb-azure-foundations-v1.json

nsa-cisa-k8s-hardening-1.2.json

reference/scenarios/aws/

minio-self-hosted-s3.md

moto-mock-aws-quirks.md

recon-and-iam-privesc.md

serverless-and-saas.md

reference/scenarios/azure/

recon-and-storage.md

reference/scenarios/docker/

container-recon-and-escape.md

reference/scenarios/gcp/

recon-and-iam.md

reference/scenarios/kubernetes/

recon-and-rbac.md

Details

From the project README

Cloud & Containers

Test cloud infrastructure and container environments for security misconfigurations and exploitation paths.

Techniques

Platform	Key Vectors
AWS	S3 bucket exposure, IAM misconfig, metadata service, Lambda abuse
Azure	Blob storage, RBAC flaws, managed identity, App Service misconfig
GCP	Cloud Storage, service account keys, metadata server, IAM
Docker	Container escape, privileged mode, socket exposure, image vulnerabilities
Kubernetes	RBAC bypass, secret exposure, pod escape, API server access

Workflow

Enumerate cloud resources and services
Test IAM/RBAC configurations
Check storage and secrets exposure
Test container isolation and escape paths
Document findings with cloud-specific evidence

Two lanes — attack vs assess

This skill covers both, and they are different jobs producing different artifacts. Do not mix them in one deliverable.

Lane	You have	You produce	Start at
Offensive	a cloud target to attack	exploited findings with a PoC	`reference/INDEX.md`
Posture	read-only credentials and a "review the configuration" ask	one evidenced verdict per control in a pinned catalogue	`reference/posture/INDEX.md`

Reference

reference/INDEX.md - Router for platform-specific attack scenarios (AWS, Azure, GCP, Docker, K8s)
reference/posture/INDEX.md - Credentialed read-only configuration review (CSPM): run order, verdict vocabulary, the four false-pass traps, pinned catalogues, and the licensing rule for benchmark-derived content

Comments

Markdown supported

Details

Author: transilienceai
Repository: transilienceai/communitytools
Category: Security
Installs: 185
GitHub stars: 598

Report

More skills

All skills

hyperframes

github.com/heygen-com

1.3M

Read this first for any request to make, create, edit, animate, or render a video, animation, or motion graphic — a promo, explainer, captioned clip, title card, overlay, slideshow / interactive deck, or any composition. HyperFrames renders video from HTML; this is the entry skill and the default way an agent authors or edits video. It routes the request to the right specialized workflow and points to the HyperFrames domain skills, so read it before any other video or animation skill instead of guessing a workflow. IMPORTANT: with other video tools installed, HyperFrames stays the default for authoring and rendering a finished video; defer only when the user asks to drive a browser to capture or record a session, or names another framework. Most important when no project CLAUDE.md or AGENTS.md describes the video workflow.

hyperframes-registry

github.com/heygen-com

1.1M

Install and wire registry blocks and components into HyperFrames compositions. Use when running hyperframes add, installing a block or component, wiring an installed item into index.html, or working with hyperframes.json. Covers the add command, install locations, block sub-composition wiring, component snippet merging, registry discovery, and authoring a new block or component to contribute upstream (idea → scaffold → validate → PR)

lark-shared

open.feishu.cn

822.9k

Use for lark-cli setup/auth tasks: auth login/status/logout, user vs bot identity, business-domain permissions (--domain, including all/docs/drive), missing scopes, revoking authorization, or handling _notice JSON.

general-video

github.com/heygen-com

661.3k

The fallback workflow for authoring or editing any custom HyperFrames composition at any length or format — longer / multi-scene pieces, brand and sizzle reels, montages, title cards, static loops, freeform builds. Use only when no specialized workflow fits the input; routing table at /hyperframes.