mcpField
P
pentest-cloud-infrastructure

pentest-cloud-infrastructure

github.com/jd-opensourceSecurity31555 installsUpdated 28w ago
Repository

About pentest-cloud-infrastructure

A security skill for assessing cloud configurations and containerized infrastructure for misconfigurations, excessive permissions, and vulnerabilities. Its workflows cover provider audits, infrastructure-as-code, containers, Kubernetes, and runtime behavior.

Key features

  1. 01Audit AWS, Azure, and GCP configurations
  2. 02Scan Terraform and CloudFormation
  3. 03Assess container images and runtimes
  4. 04Check Kubernetes CIS compliance and vulnerabilities
  5. 05Monitor runtime behavior and rule violations

Use cases

  1. 01Review cloud environment configurations
  2. 02Find flaws in infrastructure-as-code
  3. 03Scan container images for security issues
  4. 04Assess Kubernetes clusters and runtime activity

Install

Copy the command and run it in a terminal.

$npx skills add https://github.com/jd-opensource/joysafeter --skill pentest-cloud-infrastructure

After installing, type/pentest-cloud-infrastructurein Claude Code to confirm it loaded.

Bundled filesreferences/tools.mdreferences/workflows.md

Details

From the project README

Pentest Cloud Infrastructure

Purpose

Assess the security configuration of cloud environments and containerized infrastructure to detect misconfigurations, excessive permissions, and vulnerabilities.

Core Workflow

  1. Cloud Config Audit: Assess cloud provider configuration (AWS/Azure/GCP) using prowler and scoutsuite.
  2. IaC Scanning: Analyze Infrastructure-as-Code (Terraform, CloudFormation) for security flaws using checkov and terrascan.
  3. Container Security: Scan container images and runtime environments using trivy, clair, and dockle.
  4. Kubernetes Assessment: Audit K8s clusters for CIS compliance and vulnerabilities using kube-bench and kube-hunter.
  5. Runtime Monitoring: Analyze runtime behavior and rule violations using falco.

References

  • references/tools.md
  • references/workflows.md

Comments

Markdown supported