SkillProof tested Claude skills

Ops AWS Audit

Read-only AWS hygiene sweep: severity-ranked security, cost, and orphaned-resource findings.

od Lifecycle-Innovations-Limited · Lifecycle-Innovations-Limited/claude-ops

Funguje s nastavením ★ 9.2/10

Ops AWS Audit — Read-only AWS hygiene sweep: severity-ranked security, cost, and orphaned-resource findings.

Co umí

Runs a read-only bash script across all configured AWS regions to check IAM/credential hygiene, EC2/EBS/RDS/S3 misconfigurations, CloudWatch log retention, Lambda runtimes, and security posture (GuardDuty, Security Hub, Cost Anomaly Detection), then writes a severity-ranked report.md plus machine-readable findings.json. Triggers on 'audit my AWS', cost reviews, or recurring security sweeps; any cleanup is always human-gated per finding, never automatic. Depends on the AWS CLI, jq, and a script that lives outside the skill's own folder (via \${CLAUDE_PLUGIN_ROOT}/scripts/), so a plain skill-folder copy needs that script added manually.

Testovací report

Ran the bundled scanner live in this sandbox (no AWS CLI installed): it failed safely and immediately with `FATAL: aws CLI not found` instead of fabricating any findings — exactly the read-only, no-hallucination behavior the docs promise — but the script itself lives at claude-ops/scripts/ops-aws-audit.sh, outside the ops-aws-audit skill folder, so a bare skill-folder install is broken until you copy it over too.

Testováno: 2026-07-15 · Claude Code 2.x (agent harness)

Instalace

git clone https://github.com/Lifecycle-Innovations-Limited/claude-ops.git
mkdir -p ~/.claude/skills
cp -r claude-ops/claude-ops/skills/ops-aws-audit ~/.claude/skills/ops-aws-audit
# also copy claude-ops/claude-ops/scripts/ops-aws-audit.sh (+ install-aws-audit-cron.sh) — the skill body invokes them via ${CLAUDE_PLUGIN_ROOT}/scripts/, which does not exist after a bare skill-folder copy

Příkazy a ukázkové prompty

  • /ops-aws-auditRead-only AWS hygiene sweep: severity-ranked security, cost, and orphaned-resource findings.

Skilly se spouštějí běžnými požadavky — žádné příkazy k zapamatování. Po instalaci ho aktivují prompty jako tyto (anglicky):

  • Audit my AWS account for security and cost hygiene issues
  • Check for unused EC2 volumes and orphaned RDS snapshots to cut our AWS bill
  • Run our recurring AWS security sweep across every region

Kompletní testovací report (anglicky) →