Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →transilienceai/cloud-containers
Cloud and container security testing - AWS, Azure, GCP, Docker, and Kubernetes misconfigurations and exploitation.
Passed 8 of 22 test cases with the skill, and 5 of 22 without it.
and 1 more in the full report
3 fixed5 passed either way14 still failing0 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 3 test cases the skill fixed. Same model, same prompt, with and without the skill.
After completing initial cloud resource enumeration in the security workflow, what step immediately follows enumeration before testing container escapes?
| Checked | Without skill | With skill |
|---|---|---|
| Identifies testing IAM and RBAC configurations as the second step | Missed | Passed |
The instructions your model reads when the skill loads.
Test cloud infrastructure and container environments for security misconfigurations and exploitation paths.
| Platform | Key Vectors |
|---|---|
| AWS | S3 bucket exposure, IAM misconfig, metadata service, Lambda abuse |
| Azure | Blob storage, RBAC flaws, managed identity, App Service misconfig |
| GCP | Cloud Storage, service account keys, metadata server, IAM |
| Docker | Container escape, privileged mode, socket exposure, image vulnerabilities |
| Kubernetes | RBAC bypass, secret exposure, pod escape, API server access |
This skill covers both, and they are different jobs producing different artifacts. Do not mix them in one deliverable.
| Lane | You have | You produce | Start at |
|---|---|---|---|
| Offensive | a cloud target to attack | exploited findings with a PoC | reference/INDEX.md |
| Posture | read-only credentials and a "review the configuration" ask | one evidenced verdict per control in a pinned catalogue | reference/posture/INDEX.md |
reference/INDEX.md - Router for platform-specific attack scenarios (AWS, Azure, GCP, Docker, K8s)reference/posture/INDEX.md - Credentialed read-only configuration review (CSPM): run order, verdict vocabulary, the four false-pass traps, pinned catalogues, and the licensing rule for benchmark-derived contenttest cases passed, vs 5 / 22 without
More skills from the same source and nearby in the registry, with their headline benchmark lift.