Ops AWS Audit
Read-only AWS hygiene sweep: severity-ranked security, cost, and orphaned-resource findings.
Test report
- Verdict
- Works with setup
- Score
- Tested
- Jul 15, 2026
- Environment
- Claude Code 2.x (agent harness)
- Upstream re-checked
- Aug 10, 2026 · b55a8b3
Ran the bundled scanner live in this sandbox (no AWS CLI installed): it failed safely and immediately with `FATAL: aws CLI not found` instead of fabricating any findings — exactly the read-only, no-hallucination behavior the docs promise — but the script itself lives at claude-ops/scripts/ops-aws-audit.sh, outside the ops-aws-audit skill folder, so a bare skill-folder install is broken until you copy it over too.
Scored on four weighted criteria — install, triggering, output vs. baseline, docs. How scoring works
- Installs cleanly 4/5
- Triggers reliably 5/5
- Output vs. baseline 9/10
- Docs & honesty 5/5
What Ops AWS Audit does
Runs a read-only bash script across all configured AWS regions to check IAM/credential hygiene, EC2/EBS/RDS/S3 misconfigurations, CloudWatch log retention, Lambda runtimes, and security posture (GuardDuty, Security Hub, Cost Anomaly Detection), then writes a severity-ranked report.md plus machine-readable findings.json. Triggers on 'audit my AWS', cost reviews, or recurring security sweeps; any cleanup is always human-gated per finding, never automatic. Depends on the AWS CLI, jq, and a script that lives outside the skill's own folder (via \${CLAUDE_PLUGIN_ROOT}/scripts/), so a plain skill-folder copy needs that script added manually.
How to install Ops AWS Audit
git clone https://github.com/Lifecycle-Innovations-Limited/claude-ops.git
mkdir -p ~/.claude/skills
cp -r claude-ops/claude-ops/skills/ops-aws-audit ~/.claude/skills/ops-aws-audit
# also copy claude-ops/claude-ops/scripts/ops-aws-audit.sh (+ install-aws-audit-cron.sh) — the skill body invokes them via ${CLAUDE_PLUGIN_ROOT}/scripts/, which does not exist after a bare skill-folder copy
Skills live in ~/.claude/skills/ (global) or .claude/skills/
(per-project). Restart Claude Code after installing.
Commands — how to trigger Ops AWS Audit
-
/ops-aws-auditRead-only AWS hygiene sweep: severity-ranked security, cost, and orphaned-resource findings.
It also activates on plain-language prompts like these:
-
Audit my AWS account for security and cost hygiene issues -
Check for unused EC2 volumes and orphaned RDS snapshots to cut our AWS bill -
Run our recurring AWS security sweep across every region
Frequently asked questions
- Is the Ops AWS Audit skill free?
- Yes. The skill itself is free from Lifecycle-Innovations-Limited/claude-ops. SkillProof publishes the install command and an independent test verdict at no cost.
- Does Ops AWS Audit work with Claude Code?
- We tested it with Claude Code 2.x (agent harness) on Jul 15, 2026. Verdict: Works with setup. Ran the bundled scanner live in this sandbox (no AWS CLI installed): it failed safely and immediately with `FATAL: aws CLI not found` instead of fabricating any findings — exactly the read-only, no-hallucination behavior the docs promise — but the script itself lives at claude-ops/scripts/ops-aws-audit.sh, outside the ops-aws-audit skill folder, so a bare skill-folder install is broken until you copy it over too.
- What is the Ops AWS Audit SkillProof Score?
- 9.2/10 — installs cleanly 4/5, triggers reliably 5/5, output vs. baseline 9/10, docs & honesty 5/5.
- How do I install Ops AWS Audit?
- Copy the install command from this page, run it in your terminal, and restart Claude Code. Skills live in ~/.claude/skills/ (global) or .claude/skills/ inside a project.
- Can I use Ops AWS Audit with Cursor, Copilot, Gemini CLI, Codex or other AI tools?
- The SKILL.md format is native to Claude (Claude Code, Desktop, claude.ai). The instructions inside adapt to other assistants: Cursor rules, GitHub Copilot instructions, Windsurf rules, Custom GPTs, AGENTS.md for OpenAI Codex, and GEMINI.md for Google Gemini CLI — our conversion guides cover each, and the free converter on the tools page does the wrapping for you.