Organization-grade cloud and supply-chain attack-surface discovery: S3/GCS/Azure Blob bucket discovery via observed-name mining (CNAME/cert-SAN/Wayback) and bounded two-class permutation (6 prefixes x 15 suffixes on trusted tokens, bounded target-bound expansion on subdomain stems), existence (HEAD/GET) vs public-listing confirmation, object-key triage into 9 value tiers (database dumps, credentials, IaC state, kubeconfig, VCS dirs, config, archives, PII, logs), dangling-CNAME bucket-takeover detection, and the ownership-gated severity model that stops an unattributable public bucket from becoming a false CRITICAL; the fully offline AWS-account-ID recovery from a leaked AKIA/ASIA/AROA access key (base32 decode, runnable stdlib Python, canonical test vector, AWS-documentation-example-ID screening); dependency-confusion confirmation for npm/PyPI (internal-signal classifier -- private-registry binding vs org-namespace match -- paired with a read-only public-registry 404 check and the npm scope-claimability nuance the public search API misses); and passive cloud-native/container/Kubernetes/CI control-plane fingerprinting (Lambda URLs, API Gateway, Cloud Run, App Service, kubelet/etcd/K8s API/dashboard, Jenkins/GitLab/Argo CD) as an org-attribution and exposure surface. Passive/discovery only -- no exploitation, no credential submission, no active control-plane confirmation (a stage-6 validate_cloud active tier is described but out of scope). Use when enumerating a target's cloud storage footprint, recovering an AWS account ID from a leaked key, confirming a supply-chain dependency-confusion vector, or fingerprinting cloud-native/K8s/CI infrastructure for an authorized external recon engagement.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
elementalsouls/Claude-OSINT☆ 2.8천2026년 10월 10일 업데이트
Build reusable Terraform modules for AWS, Azure, and GCP infrastructure following infrastructure-as-code best practices. Use when creating infrastructure modules, standardizing cloud provisioning, or implementing reusable IaC components.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
rmyndharis/antigravity-skills☆ 1.8천2026년 10월 15일 업데이트
Expert cloud architect specializing in AWS/Azure/GCP multi-cloud infrastructure design, advanced IaC (Terraform/OpenTofu/CDK), FinOps cost optimization, and modern architectural patterns. Masters serverless, microservices, security, compliance, and disaster recovery. Use PROACTIVELY for cloud architecture, cost optimization, migration planning, or multi-cloud strategies.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
rmyndharis/antigravity-skills☆ 1.8천2026년 10월 15일 업데이트
Deploy Python (Flask/Django/FastAPI) code to Azure App Service Linux. WHEN: "Flask App Service", "Django App Service", "FastAPI App Service", "deploy Python to App Service". DO NOT USE FOR: Container Apps, Functions, non-Python, Terraform/Bicep/IaC, full infra — use azure-prepare.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
microsoft/azure-skills☆ 1.6천2026년 10월 20일 업데이트
Assess and improve the reliability posture of PaaS Applications (Azure Functions and Azure App Service). Scans deployed resources for zone redundancy, ZRS storage, health probes, and multi-region failover. Presents a feature-pivoted checklist, then drives staged remediation (CLI or IaC patches) end-to-end with user confirmation. WHEN: "assess reliability", "check reliability", "zone redundant", "multi-region failover", "high availability", "disaster recovery", "single points of failure", "reliability posture", "resiliency".
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
microsoft/azure-skills☆ 1.6천2026년 10월 20일 업데이트
Architecture diagram authoring for cloud infrastructure and declared data catalogs. Use when rendering Azure IaC or DS_CATALOG_V1 relationships as caller-selected ASCII or Mermaid diagrams.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
microsoft/hve-core☆ 1.5천2026년 10월 20일 업데이트
Provision GCP infrastructure with Terraform. Configure providers and deploy Google Cloud resources. Use when implementing IaC for GCP.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
BagelHole/DevOps-Security-Agent-Skills☆ 1.2천2026년 5월 22일 업데이트
Deploy Azure resources with ARM templates and Bicep. Create modular deployments and manage dependencies. Use when deploying Azure-native IaC.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
BagelHole/DevOps-Security-Agent-Skills☆ 1.2천2026년 5월 22일 업데이트
Deploy AWS resources with CloudFormation templates. Create stacks, use nested stacks, and implement drift detection. Use when deploying AWS-native IaC.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
BagelHole/DevOps-Security-Agent-Skills☆ 1.2천2026년 5월 22일 업데이트
Provision AWS infrastructure with Terraform. Create modules, manage state, and implement IaC best practices. Use when deploying AWS resources declaratively.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
BagelHole/DevOps-Security-Agent-Skills☆ 1.2천2026년 5월 22일 업데이트
Migrate from Terraform to OpenTofu with state compatibility, provider registry setup, and CI/CD pipeline updates. Use when adopting the open-source Terraform fork or evaluating license-free IaC.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
BagelHole/DevOps-Security-Agent-Skills☆ 1.2천2026년 5월 22일 업데이트
Provision Azure infrastructure with Terraform. Configure providers, manage state, and deploy resources. Use when implementing IaC for Azure.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
BagelHole/DevOps-Security-Agent-Skills☆ 1.2천2026년 5월 22일 업데이트
Verify claims, quotations, citations and references against live primary sources, and produce a reproducible audit record instead of an assertion. Use when asked to: check whether a quotation, verse, statistic, date, attribution or citation is accurate; verify references before publishing a report, thesis, article, slide deck or legal filing; confirm a text against an authoritative database; cross-check a claim across independent sources; build a citation register or verification appendix; find out whether two datasets agree; detect a misattributed or fabricated quotation; or audit a document's existing citations. Source-agnostic by design, with working providers for REST/JSON APIs, scraped HTML, bulk corpora, bibliographic catalogues (OpenLibrary), DOI resolution (Crossref) and reference works (Wikipedia) -- including scriptural tiers (Qur'an.com, sunnah.com and an independent hadith corpus) with full diacritic handling for Arabic, Hebrew, Greek and any script with optional marks. Covers content-addressed matching when sources disagree on numbering, graded match verdicts, byte-level integrity checks, published-string verification, and a catalogue of silent failure modes (identifier divergence, mojibake, scraper blocking, false-positive keyword rules, missing glyphs, unreliable PDF text layers).
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
MoizIbnYousaf/ai-agent-skills☆ 1.2천2026년 9월 22일 업데이트
Design AWS serverless architectures for startups with IaC. Use when designing serverless architecture, writing CloudFormation, optimizing AWS costs, setting up CI/CD, or migrating to AWS across Lambda, API Gateway, and DynamoDB.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
borghei/Claude-Skills☆ 9572026년 10월 7일 업데이트
Build, manage, and operate APIs with Amazon API Gateway (REST, HTTP, and WebSocket). Triggers on phrases like: API Gateway, REST API, HTTP API, WebSocket API, custom domain, Lambda authorizer, usage plan, throttling, CORS, VPC link, private API. Also covers troubleshooting API Gateway errors (4xx, 5xx, timeout, CORS failures) and IaC templates containing API Gateway resources. For general REST API design unrelated to AWS, do not trigger.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
awslabs/agent-plugins☆ 9242026년 10월 15일 업데이트
Discover existing cloud resources using Terraform Search queries and bulk import them into Terraform management. Use when bringing unmanaged infrastructure under Terraform control, auditing cloud resources, or migrating to IaC.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
hashicorp/agent-skills☆ 9032026년 10월 5일 업데이트
Screen a client, counterparty, payer or corporate against the sanctions lists published by the designating authorities themselves — the UK Sanctions List (FCDO), OFSI, the UN Security Council, the EU consolidated list and OFAC's SDN and non-SDN lists. Use when onboarding, before taking a payment, before completing a transaction, or whenever a name must be checked against sanctions. Produces candidates and provenance, never a clearance: the record names every list searched with its publication date and count, states what was NOT searched, and ends at a blank decision block. Fails closed — a cache that is missing, damaged, truncated or stale is reported NOT SEARCHED and the process exits non-zero, so nothing can read an incomplete run as clean. Matches across transliteration, diacritics, homoglyphs and initials, because nobody spells a name the way the publisher does. Standard library only; screening opens no network connection.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
lawve-ai/awesome-legal-skills☆ 8832026년 10월 20일 업데이트
Expert knowledge for Azure Sre Agent development including troubleshooting, best practices, decision making, architecture & design patterns, security, configuration, integrations & coding patterns, and deployment. Use when integrating SRE Agent with DevOps/GitHub, Log Analytics/App Insights, AKS Java workloads, IaC deployments, or DR setups, and other Azure Sre Agent related development tasks. Not for Azure Monitor (use azure-monitor), Azure Service Health (use azure-service-health), Azure Reliability (use azure-reliability), Azure Resiliency (use azure-resiliency).
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
MicrosoftDocs/Agent-Skills☆ 7902026년 10월 19일 업데이트
Expert knowledge for Azure Traffic Manager development including troubleshooting, best practices, decision making, architecture & design patterns, security, configuration, and integrations & coding patterns. Use when configuring Traffic Manager profiles, routing methods, IaC (ARM/Bicep/Terraform), Traffic View, or nested designs, and other Azure Traffic Manager related development tasks. Not for Azure Front Door (use azure-front-door), Azure Load Balancer (use azure-load-balancer), Azure Application Gateway (use azure-application-gateway), Azure Virtual WAN (use azure-virtual-wan).
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
MicrosoftDocs/Agent-Skills☆ 7902026년 10월 19일 업데이트
Expert knowledge for Azure Web Application Firewall development including best practices, decision making, limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when configuring Front Door/App Gateway WAF rules, rate limits, geo/IP filters, Sentinel logging, or IaC deployments, and other Azure Web Application Firewall related development tasks. Not for Azure Application Gateway (use azure-application-gateway), Azure Front Door (use azure-front-door), Azure Firewall (use azure-firewall), Azure DDoS Protection (use azure-ddos-protection).
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
MicrosoftDocs/Agent-Skills☆ 7902026년 10월 19일 업데이트
Expert knowledge for Azure Notification Hubs development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when sending FCM/APNS/WNS pushes, using tags/templates, managing tiers, IaC configs, or Private Link access, and other Azure Notification Hubs related development tasks. Not for Azure Event Hubs (use azure-event-hubs), Azure Service Bus (use azure-service-bus), Azure SignalR Service (use azure-signalr-service), Azure Web PubSub (use azure-web-pubsub).
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
MicrosoftDocs/Agent-Skills☆ 7902026년 10월 19일 업데이트
Expert knowledge for Azure Data Science Virtual Machines development including troubleshooting, decision making, architecture & design patterns, security, configuration, integrations & coding patterns, and deployment. Use when managing DSVM images/tools, IaC deployment (Bicep/ARM), Key Vault secrets, MLflow, or GPU/Jupyter issues, and other Azure Data Science Virtual Machines related development tasks. Not for Azure Virtual Machines (use azure-virtual-machines), Azure Machine Learning (use azure-machine-learning), Azure Databricks (use azure-databricks), Azure HDInsight (use azure-hdinsight).
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
MicrosoftDocs/Agent-Skills☆ 7902026년 10월 19일 업데이트
Prevent Terraform/OpenTofu hallucinations by diagnosing and fixing failure modes: identity churn, secret exposure, blast-radius mistakes, CI drift, and compliance gate gaps. Use when generating, reviewing, refactoring, or migrating IaC and when building delivery/testing pipelines.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
LukasNiessen/terrashark☆ 7202026년 10월 18일 업데이트
Managing cloud infrastructure using declarative and imperative IaC tools. Use when provisioning cloud resources (Terraform/OpenTofu for multi-cloud, Pulumi for developer-centric workflows, AWS CDK for AWS-native infrastructure), designing reusable modules, implementing state management patterns, or establishing infrastructure deployment workflows.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
ancoleman/ai-design-components☆ 5252025년 12월 11일 업데이트