Storage Exposure Auditor

Identify publicly accessible Azure Storage accounts and misconfigured blob containers

This skill is generally coherent for a human-assisted audit: it tells you how to run az commands and paste JSON outputs for analysis. Before using it, confirm these points: 1) Do not paste storage account keys, connection strings, or raw SAS tokens — the skill warns against this, and you should redact them or avoid including them. 2) For checks like key rotation age, SAS usage, or diagnostic logging, prefer running local scripts/az commands that emit only non-sensitive metadata (e.g., timestamps, booleans, counts) and paste those results instead of secrets; ask the skill author for exact safe commands if unsure. 3) Use the least-privilege roles to collect data (Reader + Storage Blob Data Reader for listing containers). 4) If you must share logs or evidence, scrub or redact secrets first and consider sharing in a secure channel. 5) Because the SKILL.md mixes role guidance and includes checks that normally need logs/keys, ask the author for clarified, explicit commands that return only safe indicators before pasting anything from your environment. If the author cannot provide safe extraction commands, run the analysis locally or with a trusted security auditor instead.

Type: OpenClaw Skill Name: storage-exposure-auditor Version: 1.0.0 The skill is a security auditing tool designed to analyze Azure Storage configurations for public exposure. It operates by providing the user with read-only Azure CLI commands to run manually and then analyzing the resulting JSON output. The instructions in SKILL.md explicitly forbid the agent from requesting credentials or secrets and include safety checks to ensure the user does not accidentally provide sensitive keys, aligning perfectly with its stated purpose.