AI Blocks › Keep your code secure
Cloud misconfiguration finder
Point it at your cloud setup files. Get open buckets, loose access rules and gaps ranked with fixes.
Cloud misconfiguration finder is a free AI skill for the job "Keep your code secure". Give the instructions to an AI assistant that supports the required files and tools, then review its output.
Free · No account · MIT licence · Made by Alireza Rezvani · Level: advanced · Thinking: high
Made by Alireza Rezvani. See the original on GitHub; we copied it as it is, with its licence.
What it does
A ranked list of cloud settings that put you at risk, each with a fix. Point it at your infrastructure files or exported configs, and it finds open storage buckets, loose permissions and overly wide network rules. It checks four areas. Permissions are scanned for paths that let a user raise their own access. Storage is checked for public exposure. Network rules are checked for ports open to the whole internet. Infrastructure code, such as Terraform files, is read for the same problems before it is deployed. A helper script scores each finding by risk, and the report names which cloud provider each check covers. It is a preventive check on setup, not a hunt for an attack in progress.
You give it
- Infrastructure code or exported configs
- Which cloud provider you use
- Permission policies (optional)
- Network rules (optional)
You get
- Findings ranked by risk
- Public storage exposures
- Risky permission paths
- Open network rules
- Fixes for each issue
Use it when
- You want to catch an open storage bucket before it leaks data.
- You inherited an account and no one knows what permissions exist.
- You want to review Terraform files before they go live.
- A security audit is coming and you need a list of gaps.
How to use it
- Add it to your AI once: download it and add the folder to Claude, ChatGPT or Codex as a skill.
- Ask for the job in your own words. Your AI opens the skill when it fits.
- It works best when your AI can run code.