<< All versions
Skill v1.0.2
currentAutomated scan100/100transilienceai/communitytools/cloud-containers
~2 modified
──Details
PublishedAugust 9, 2026 at 12:08 AM
Content Hashsha256:8a232fb35e83eab3...
Git SHA95fdc128af4c
Bump Typepatch
──Files
Files (1 file, 1.9 KB)
SKILL.md1.9 KBactive
SKILL.md · 43 lines · 1.9 KB
version: "1.0.2" name: cloud-containers description: Cloud and container security testing - AWS, Azure, GCP, Docker, and Kubernetes misconfigurations and exploitation.
Cloud & Containers
Test cloud infrastructure and container environments for security misconfigurations and exploitation paths.
Techniques
| Platform | Key Vectors | |
|---|---|---|
| AWS | S3 bucket exposure, IAM misconfig, metadata service, Lambda abuse | |
| Azure | Blob storage, RBAC flaws, managed identity, App Service misconfig | |
| GCP | Cloud Storage, service account keys, metadata server, IAM | |
| Docker | Container escape, privileged mode, socket exposure, image vulnerabilities | |
| Kubernetes | RBAC bypass, secret exposure, pod escape, API server access |
Workflow
- Enumerate cloud resources and services
- Test IAM/RBAC configurations
- Check storage and secrets exposure
- Test container isolation and escape paths
- Document findings with cloud-specific evidence
Two lanes — attack vs assess
This skill covers both, and they are different jobs producing different artifacts. Do not mix them in one deliverable.
| Lane | You have | You produce | Start at | |
|---|---|---|---|---|
| Offensive | a cloud target to attack | exploited findings with a PoC | `reference/INDEX.md` | |
| Posture | read-only credentials and a "review the configuration" ask | one evidenced verdict per control in a pinned catalogue | `reference/posture/INDEX.md` |
Reference
- `reference/INDEX.md` - Router for platform-specific attack scenarios (AWS, Azure, GCP, Docker, K8s)
- `reference/posture/INDEX.md` - Credentialed read-only configuration review (CSPM): run order, verdict vocabulary, the four false-pass traps, pinned catalogues, and the licensing rule for benchmark-derived content