Security Group Auditor

Audit AWS Security Groups and VPC configurations for dangerous internet exposure

This skill is instruction-only and does not ask for your AWS credentials, which is good. Before installing or using it: (1) Run the listed aws CLI commands yourself and share only the exported JSON the skill requests, not any credentials or environment files. (2) Review and redact any sensitive metadata you don't want analyzed or exposed (for example internal hostnames, exact public IPs, account IDs) — the guidance already warns to confirm no credentials are included. (3) If you prefer higher privacy, extract only the fields you want analyzed (rules, CIDRs, ports, SG IDs) rather than pasting whole outputs. (4) Because the agent can be invoked autonomously (normal default), be mindful when enabling any skill that will run without explicit step-by-step confirmation; consider limiting usage to interactive/manual sessions if you want tighter control.

Type: OpenClaw Skill Name: security-group-auditor Version: 1.0.0 The skill is designed for auditing AWS security groups and explicitly states it does not execute AWS CLI commands or access the user's AWS account directly. It relies on user-provided, read-only data. Crucially, the `SKILL.md` includes explicit instructions for the AI agent to 'Never ask for credentials, access keys, or secret keys' and to 'confirm no credentials are included before processing' user-pasted data. These instructions act as strong safeguards against prompt injection leading to credential theft or unauthorized access, aligning the skill's behavior with its stated benign purpose.