Security audit
Security checks for vulnerabilities and agentic risk
This skill is a coherent read-only AWS VPC audit guide that uses disclosed AWS CLI queries and does not include executable code, persistence, or hidden data movement.
Install only where the AWS credentials or assumed roles are intentionally read-only and scoped to the accounts, regions, VPCs, and log groups you want audited. Treat Flow Logs and network inventory as sensitive infrastructure data, and review any remediation separately before making AWS changes.
The manifest and body repeatedly emphasize a read-only CLI audit, suggesting purely observational commands. Later guidance instructs operators to use aws sts assume-role for multi-account operation, which is an active credential-acquisition step rather than a simple read-only resource query, creating a mild contradiction in stated intent versus documented behavior.
The manifest describes a VPC networking audit using read-only AWS CLI commands. In the troubleshooting section, the skill expands beyond that narrow description by recommending AWS Config aggregator and AWS RAM shared-resource approaches for centralized visibility, which are broader AWS service capabilities and not part of the described CLI-only audit flow.
No suspicious patterns detected.
