Is the AWS Penetration Testing skill free?

Yes. The skill itself is free from zebbern/claude-code-guide. SkillProof publishes the install command and an independent test verdict at no cost.

What is the AWS Penetration Testing SkillProof Score?

8.8/10 — installs cleanly 5/5, triggers reliably 5/5, output vs. baseline 8/10, docs & honesty 4/5.

How do I install AWS Penetration Testing?

Copy the install command from this page, run it in your terminal, and restart Claude Code. Skills live in ~/.claude/skills/ (global) or .claude/skills/ inside a project.

Can I use AWS Penetration Testing with Cursor, Copilot, Gemini CLI, Codex or other AI tools?

The SKILL.md format is native to Claude (Claude Code, Desktop, claude.ai). The instructions inside adapt to other assistants: Cursor rules, GitHub Copilot instructions, Windsurf rules, Custom GPTs, AGENTS.md for OpenAI Codex, and GEMINI.md for Google Gemini CLI — our conversion guides cover each, and the free converter on the tools page does the wrapping for you.

AWS Penetration Testing

AWS red-team cheat sheet: IAM privesc paths, metadata SSRF (incl. IMDSv2), S3/Lambda exploitation, persistence.

by zebbern · zebbern/claude-code-guide

Tested · Works

Install — copy the command Download source ↗

Test report

Verdict: Tested · Works
Score: 8.8/10
Tested: Jul 14, 2026
Environment: Claude Code 2.x (agent harness)
Upstream re-checked: Aug 10, 2026 · 0cd8b42

A structured AWS red-team cheat sheet, not just prose: its 'Shadow Admin Permissions' table (iam:PutUserPolicy, iam:PassRole+ec2:RunInstances, lambda:UpdateFunctionCode) and the IMDSv1-vs-IMDSv2-token metadata dance are concrete techniques a memory-only answer left vague or skipped, and the skill still bakes in a written-authorization/no-persistent-backdoors constraints block.

Scored on four weighted criteria — install, triggering, output vs. baseline, docs. How scoring works

Installs cleanly 5/5
Triggers reliably 5/5
Output vs. baseline 8/10
Docs & honesty 4/5

What AWS Penetration Testing does

A red-team reference for authorized AWS security assessments, covering IAM enumeration and privilege-escalation paths, EC2/Fargate metadata SSRF, S3 bucket and Lambda exploitation, SSM command execution, and track-covering. Triggers on explicit AWS offensive-security phrasing like 'pentest AWS', 'enumerate IAM', 'AWS privilege escalation', 'S3 bucket testing', or 'metadata SSRF'.

How to install AWS Penetration Testing

git clone https://github.com/zebbern/claude-code-guide
cd claude-code-guide
mkdir -p ~/.claude/skills
cp -r skills/aws-penetration-testing ~/.claude/skills/aws-penetration-testing

Skills live in ~/.claude/skills/ (global) or .claude/skills/ (per-project). Restart Claude Code after installing.

Commands — how to trigger AWS Penetration Testing

/aws-penetration-testing AWS red-team cheat sheet: IAM privesc paths, metadata SSRF (incl. IMDSv2), S3/Lambda exploitation, persistence.

It also activates on plain-language prompts like these:

Plan an IAM privilege-escalation check on this AWS account
Test this S3 bucket and EC2 metadata for SSRF exposure
Audit our AWS roles for shadow-admin permissions

Frequently asked questions

Is the AWS Penetration Testing skill free?: Yes. The skill itself is free from zebbern/claude-code-guide. SkillProof publishes the install command and an independent test verdict at no cost.
Does AWS Penetration Testing work with Claude Code?: We tested it with Claude Code 2.x (agent harness) on Jul 14, 2026. Verdict: Tested · Works. A structured AWS red-team cheat sheet, not just prose: its 'Shadow Admin Permissions' table (iam:PutUserPolicy, iam:PassRole+ec2:RunInstances, lambda:UpdateFunctionCode) and the IMDSv1-vs-IMDSv2-token metadata dance are concrete techniques a memory-only answer left vague or skipped, and the skill still bakes in a written-authorization/no-persistent-backdoors constraints block.
What is the AWS Penetration Testing SkillProof Score?: 8.8/10 — installs cleanly 5/5, triggers reliably 5/5, output vs. baseline 8/10, docs & honesty 4/5.
How do I install AWS Penetration Testing?: Copy the install command from this page, run it in your terminal, and restart Claude Code. Skills live in ~/.claude/skills/ (global) or .claude/skills/ inside a project.
Can I use AWS Penetration Testing with Cursor, Copilot, Gemini CLI, Codex or other AI tools?: The SKILL.md format is native to Claude (Claude Code, Desktop, claude.ai). The instructions inside adapt to other assistants: Cursor rules, GitHub Copilot instructions, Windsurf rules, Custom GPTs, AGENTS.md for OpenAI Codex, and GEMINI.md for Google Gemini CLI — our conversion guides cover each, and the free converter on the tools page does the wrapping for you.