Skills aws-security-audit

📦

aws-security-audit

Name: aws-security-audit
Author: sickn33

Content revision r2 Safe ⚙️ External commands🌐 Network access📁 Filesystem access

Audit AWS Security Posture

AWS misconfigurations can expose identities, data, and networks without clear prioritization. This skill guides read-only checks and organizes findings by security domain and remediation urgency.

Supports: Claude Codex Code(CC)

🥉 78 Bronze

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "aws-security-audit" from https://skillstore.io/skills/sickn33-aws-security-audit.md and its manifest at https://skillstore.io/api/skills/sickn33-aws-security-audit/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/sickn33-aws-security-audit.md Signed manifest GET /api/skills/sickn33-aws-security-audit/manifest Signed lockfile GET /api/skills/sickn33-aws-security-audit/lockfile

Test it

Using "aws-security-audit". Check IAM security risks in my AWS account.

Expected outcome:

IAM review: MFA gaps found for 3 users. One root access key is present. Priority: remove root keys, then enforce MFA.

Using "aws-security-audit". Find unencrypted resources in us-east-1.

Expected outcome:

Data protection review: 4 EBS volumes and 1 RDS instance lack encryption. Validate workloads before scheduling encrypted replacements.

Using "aws-security-audit". Summarize findings for a compliance review.

Expected outcome:

Compliance summary: evidence supports several CIS controls. CloudTrail and Config gaps remain. PCI DSS and HIPAA conclusions require additional control testing.

Security Audit

Safe

v5 • 7/23/2026 Open versioned report

All 48 static alerts are false positives caused by documented, read-only audit examples, Markdown syntax, JMESPath literals, reference links, and detection indicators. No prompt injection, credential exfiltration, resource mutation, or unsafe dynamic execution was found.

Files scanned

375

Lines analyzed

Review items

False positives ignored

Risk Factors

No confirmed security findings were detected by the latest completed static and semantic audit. This does not prove the skill has no side effects.

Audited by: codex View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/sickn33-aws-security-audit/audits/5?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/sickn33-aws-security-audit/security.svg)](https://skillstore.io/skills/sickn33-aws-security-audit?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/sickn33-aws-security-audit?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/sickn33-aws-security-audit/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/sickn33-aws-security-audit.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

sickn33. (2026). aws-security-audit security audit report (audit version 5) [Author version unspecified]. Skillstore. https://skillstore.io/skills/sickn33-aws-security-audit/audits/5

BibTeX citation

@techreport{sickn33-sickn33-aws-security-audit-2026,
  author = {sickn33},
  title = {aws-security-audit security audit report (audit version 5)},
  institution = {Skillstore},
  year = {2026},
  number = {5},
  url = {https://skillstore.io/skills/sickn33-aws-security-audit/audits/5},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "aws-security-audit security audit report (audit version 5)"
version: "unspecified"
type: report
authors:
  - name: "sickn33"
date-released: "2026-07-23"
url: "https://skillstore.io/skills/sickn33-aws-security-audit/audits/5"
identifiers:
  - type: other
    value: "skillstore:sickn33-aws-security-audit:audit:5"
    description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: High

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

Review account configuration

Run focused checks across IAM, networking, encryption, and logging before a production readiness review.

Triage security exposure

Collect evidence for public access, missing encryption, stale credentials, and monitoring gaps, then prioritize remediation.

Prepare compliance evidence

Map observed AWS settings to selected CIS AWS, PCI DSS, and HIPAA control areas while documenting untested requirements.

Try These Prompts

Run a basic review

Review my AWS account with read-only checks. Start with IAM, network exposure, encryption, and logging. Ask before running commands.

Audit selected regions

Audit AWS profile [profile] in regions [regions]. List missing permissions, evidence, severity, and recommended fixes without changing resources.

Map compliance controls

Compare findings against CIS AWS Foundations, PCI DSS, and HIPAA. Separate direct evidence from inferred coverage and identify untested controls.

Design multi-account auditing

Design a repeatable audit for [accounts]. Use least-privilege roles, regional coverage, evidence retention, scoring, and prioritized remediation tracking.

Best Practices

Use a dedicated read-only role with the minimum permissions required for each check.
Confirm the active AWS account, profile, and regions before collecting evidence.
Validate findings manually and document accepted exceptions before assigning remediation deadlines.

Avoid

Do not run audits with administrator credentials when a scoped read-only role is available.
Do not treat a simplified score as proof of compliance or complete security coverage.
Do not automate remediation from these checks without testing, approvals, and rollback plans.

Frequently Asked Questions

Does this skill change AWS resources?

The provided audit examples use read-oriented AWS APIs. Review every command and keep remediation separate from evidence collection.

What credentials are required?

Use a configured AWS CLI profile or SDK credentials with the minimum read permissions needed for the selected checks.

Can it audit multiple AWS accounts?

Yes. Repeat the checks through approved cross-account roles and consolidate results with account identifiers.

Does it check every AWS region?

No. IAM is global, while many other services are regional. Run regional checks in every location your organization uses.

Does the output prove compliance?

No. The mappings support evidence collection, but certification requires complete control testing, documentation, and qualified review.

How are permission failures handled?

Some examples suppress expected errors, so missing permissions can hide gaps. Record AccessDenied responses and mark affected checks as incomplete.

Developer Details

Author

sickn33

License

MIT

Skillstore revision

Version notice

The author did not declare a version.

Repository

https://github.com/sickn33/antigravity-awesome-skills/tree/main/skills/security/aws-security-audit

Ref

86d877f219e2131f05dd5b37c5e329c71c7b8ec4

Maintenance freshness

7/26/2026

Usage

6 downloads · 72 views

File structure

📄 SKILL.md