[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M6ESTJVAF7PC8QGV168PE9MW":3,"skill-same:01M6ESTJVAF7PC8QGV168PE9MW":409},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":16,"categories":17,"keywords":28,"publishedAt":49,"linkOnly":50,"markdownContent":51,"markdownBody":52,"frontMatter":53,"refName":72,"commitSha":73,"skillDirectory":74,"forksCount":14,"repositoryHtmlUrl":75,"repositoryHomepageUrl":76,"ownerHtmlUrl":77,"ownerBlogUrl":6,"ownerDescription":78,"updatedAt":79,"install":80,"resources":93},"01M6ESTJVAF7PC8QGV168PE9MW","auditing-aws-s3-bucket-permissions",null,"Systematically audit AWS S3 bucket permissions to identify publicly accessible buckets, overly permissive ACLs, misconfigured bucket policies, and missing encryption settings using AWS CLI, S3audit, and Prowler to enforce least-privilege data access controls.","henriquescastilho\u002Fmy-claude","henriquescastilho","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F153296945?v=4","01M6ESH7EXPXTH9CVQ4K16SRG8","Henrique Scheer","01M6ESH7JHEK2PTNNH4HEH787Z",0,"Apache-2.0","https:\u002F\u002Fgithub.com\u002Fhenriquescastilho\u002Fmy-claude\u002Fblob\u002Fmain\u002F.claude\u002Fskills\u002Fauditing-aws-s3-bucket-permissions\u002FSKILL.md",[18,23],{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000023","Skill与智能体开发","SCENARIO","使用场景",{"categoryNo":24,"categoryName":25,"taxonomyType":26,"taxonomyTypeDesc":27},"01JBSEEDCAT000000000000033","数据分析师","PROFESSION","适用职业",[29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48],"aws s3","permissions","s3","aws","auditing aws s3 bucket permissions","de","cli","cm","aws cli","access","t1078","least-privilege","prowler","encryption","data","cloud-security","audit","pr","cybersecurity","security","2026-11-10 10:12:30",false,"---\nname: auditing-aws-s3-bucket-permissions\ndescription: 'Systematically audit AWS S3 bucket permissions to identify publicly\n  accessible buckets, overly permissive ACLs, misconfigured bucket policies, and missing\n  encryption settings using AWS CLI, S3audit, and Prowler to enforce least-privilege\n  data access controls.\n\n  '\ndomain: cybersecurity\nsubdomain: cloud-security\ntags:\n- cloud-security\n- aws\n- s3\n- bucket-permissions\n- data-protection\n- access-control\nversion: '1.0'\nauthor: mahipal\nlicense: Apache-2.0\nnist_csf:\n- PR.IR-01\n- ID.AM-08\n- GV.SC-06\n- DE.CM-01\nmitre_attack:\n- T1530\n- T1619\n- T1078.004\n- T1537\n- T1567.002\n---\n\n# Auditing AWS S3 Bucket Permissions\n\n## When to Use\n\n- When conducting a security assessment of AWS environments to identify publicly exposed data\n- When onboarding a new AWS account and establishing a security baseline for storage resources\n- When responding to an alert about potential S3 data exposure from AWS Trusted Advisor or Security Hub\n- When compliance frameworks (SOC 2, PCI DSS, HIPAA) require periodic review of data access controls\n- When a breach or credential compromise necessitates immediate review of all accessible S3 resources\n\n**Do not use** for auditing non-AWS object storage (use provider-specific tools), for real-time monitoring (use S3 Event Notifications with Lambda), or for auditing S3 access patterns (use S3 Access Analyzer or CloudTrail S3 data events).\n\n## Prerequisites\n\n- AWS CLI v2 configured with credentials that have `s3:GetBucketPolicy`, `s3:GetBucketAcl`, `s3:GetBucketPublicAccessBlock`, `s3:GetEncryptionConfiguration`, and `s3:ListAllMyBuckets` permissions\n- Prowler installed (`pip install prowler`) for automated CIS benchmark checks\n- S3audit or similar enumeration tool for quick public bucket detection\n- Access to AWS Organizations if auditing across multiple accounts\n- Python 3.8+ with boto3 for custom audit scripts\n\n## Workflow\n\n### Step 1: Enumerate All S3 Buckets and Account-Level Block Public Access\n\nCheck the account-level S3 Block Public Access settings first, then list all buckets with their regions.\n\n```bash\n# Check account-level S3 Block Public Access settings\naws s3control get-public-access-block \\\n  --account-id $(aws sts get-caller-identity --query Account --output text) \\\n  --output json\n\n# List all buckets with creation dates\naws s3api list-buckets \\\n  --query 'Buckets[*].[Name,CreationDate]' \\\n  --output table\n\n# Get bucket regions for each bucket\nfor bucket in $(aws s3api list-buckets --query 'Buckets[*].Name' --output text); do\n  region=$(aws s3api get-bucket-location --bucket \"$bucket\" --query 'LocationConstraint' --output text)\n  echo \"$bucket -> ${region:-us-east-1}\"\ndone\n```\n\n### Step 2: Check Each Bucket's Public Access Block and ACL Configuration\n\nIterate through all buckets to evaluate their individual public access blocks and ACL grants.\n\n```bash\n# Check per-bucket Block Public Access settings\nfor bucket in $(aws s3api list-buckets --query 'Buckets[*].Name' --output text); do\n  echo \"=== $bucket ===\"\n  aws s3api get-public-access-block --bucket \"$bucket\" 2>\u002Fdev\u002Fnull || echo \"  No Block Public Access configured\"\n\n  # Check ACL for public grants\n  aws s3api get-bucket-acl --bucket \"$bucket\" \\\n    --query 'Grants[?Grantee.URI==`http:\u002F\u002Facs.amazonaws.com\u002Fgroups\u002Fglobal\u002FAllUsers` || Grantee.URI==`http:\u002F\u002Facs.amazonaws.com\u002Fgroups\u002Fglobal\u002FAuthenticatedUsers`]' \\\n    --output json\ndone\n```\n\n### Step 3: Analyze Bucket Policies for Overly Permissive Access\n\nReview bucket policies for wildcard principals, missing conditions, and statements that allow broad access.\n\n```bash\n# Extract and analyze bucket policies\nfor bucket in $(aws s3api list-buckets --query 'Buckets[*].Name' --output text); do\n  policy=$(aws s3api get-bucket-policy --bucket \"$bucket\" --output text 2>\u002Fdev\u002Fnull)\n  if [ -n \"$policy\" ]; then\n    echo \"=== $bucket policy ===\"\n    echo \"$policy\" | python3 -c \"\nimport json, sys\npolicy = json.load(sys.stdin)\nfor stmt in policy.get('Statement', []):\n    principal = stmt.get('Principal', {})\n    effect = stmt.get('Effect', '')\n    if principal == '*' or principal == {'AWS': '*'}:\n        print(f'  WARNING: {effect} with wildcard principal')\n        print(f'  Actions: {stmt.get(\\\"Action\\\", \\\"\\\")}')\n        print(f'  Condition: {stmt.get(\\\"Condition\\\", \\\"NONE\\\")}')\n\"\n  fi\ndone\n```\n\n### Step 4: Verify Encryption and Versioning Settings\n\nCheck that all buckets have server-side encryption enabled and versioning configured for data protection.\n\n```bash\n# Check encryption and versioning status for all buckets\nfor bucket in $(aws s3api list-buckets --query 'Buckets[*].Name' --output text); do\n  echo \"=== $bucket ===\"\n\n  # Encryption configuration\n  aws s3api get-bucket-encryption --bucket \"$bucket\" 2>\u002Fdev\u002Fnull \\\n    && echo \"  Encryption: ENABLED\" \\\n    || echo \"  Encryption: DISABLED\"\n\n  # Versioning status\n  aws s3api get-bucket-versioning --bucket \"$bucket\" \\\n    --query 'Status' --output text\n\n  # Logging status\n  aws s3api get-bucket-logging --bucket \"$bucket\" \\\n    --query 'LoggingEnabled' --output text 2>\u002Fdev\u002Fnull\ndone\n```\n\n### Step 5: Run Prowler S3-Specific Checks\n\nExecute Prowler's S3-focused checks aligned with CIS AWS Foundations Benchmark.\n\n```bash\n# Run Prowler S3-specific checks\nprowler aws \\\n  --checks s3_bucket_public_access \\\n           s3_bucket_default_encryption \\\n           s3_bucket_policy_public_write_access \\\n           s3_bucket_server_access_logging_enabled \\\n           s3_bucket_versioning_enabled \\\n           s3_bucket_acl_prohibited \\\n  -M json-ocsf \\\n  -o .\u002Fprowler-s3-audit\u002F\n\n# View summary\nprowler aws --checks s3 -M csv -o .\u002Fprowler-s3-audit\u002F\n```\n\n### Step 6: Use IAM Access Analyzer for S3 Public and Cross-Account Findings\n\nLeverage IAM Access Analyzer to identify buckets shared externally or publicly.\n\n```bash\n# List Access Analyzer findings for S3\naws accessanalyzer list-findings \\\n  --analyzer-arn $(aws accessanalyzer list-analyzers --query 'analyzers[0].arn' --output text) \\\n  --filter '{\"resourceType\": {\"eq\": [\"AWS::S3::Bucket\"]}}' \\\n  --query 'findings[*].[resource,status,condition,principal]' \\\n  --output table\n\n# Create an analyzer if one does not exist\naws accessanalyzer create-analyzer \\\n  --analyzer-name s3-access-audit \\\n  --type ACCOUNT\n```\n\n### Step 7: Generate Audit Report and Remediate\n\nCompile findings into an actionable report and apply remediation for critical issues.\n\n```bash\n# Quick remediation: Enable Block Public Access on a bucket\naws s3api put-public-access-block \\\n  --bucket TARGET_BUCKET \\\n  --public-access-block-configuration \\\n  'BlockPublicAcls=true,IgnorePublicAcls=true,BlockPublicPolicy=true,RestrictPublicBuckets=true'\n\n# Enable default encryption with SSE-S3\naws s3api put-bucket-encryption \\\n  --bucket TARGET_BUCKET \\\n  --server-side-encryption-configuration \\\n  '{\"Rules\":[{\"ApplyServerSideEncryptionByDefault\":{\"SSEAlgorithm\":\"aws:kms\",\"KMSMasterKeyID\":\"alias\u002Faws\u002Fs3\"},\"BucketKeyEnabled\":true}]}'\n\n# Enable versioning\naws s3api put-bucket-versioning \\\n  --bucket TARGET_BUCKET \\\n  --versioning-configuration Status=Enabled\n```\n\n## Key Concepts\n\n| Term | Definition |\n|------|------------|\n| S3 Block Public Access | Account-level and bucket-level settings that override ACLs and policies to prevent public access regardless of individual resource configurations |\n| Bucket Policy | JSON-based resource policy attached to a bucket that defines who can access the bucket and what actions they can perform |\n| ACL (Access Control List) | Legacy S3 access control mechanism granting permissions to AWS accounts or predefined groups like AllUsers or AuthenticatedUsers |\n| IAM Access Analyzer | AWS service that analyzes resource policies to identify resources shared with external entities or the public |\n| Server-Side Encryption | Encryption applied by S3 at the object level using SSE-S3, SSE-KMS, or SSE-C before writing data to disk |\n| CIS AWS Foundations Benchmark | Security best practice standard from Center for Internet Security with specific controls for S3 bucket configuration |\n\n## Tools & Systems\n\n- **AWS CLI**: Primary interface for querying S3 bucket configurations, policies, ACLs, and encryption settings\n- **Prowler**: Open-source security tool with 50+ S3-specific checks aligned to CIS, PCI DSS, and HIPAA controls\n- **IAM Access Analyzer**: AWS-native service for continuous monitoring of resource policies that grant external access\n- **S3audit**: Lightweight tool for quick enumeration of public S3 buckets across an account\n- **ScoutSuite**: Multi-cloud auditing tool that collects S3 configuration data and generates risk-scored HTML reports\n\n## Common Scenarios\n\n### Scenario: Identifying a Publicly Readable Bucket Containing Customer Data\n\n**Context**: A security engineer receives a Trusted Advisor alert about a publicly accessible S3 bucket. The bucket was created by a development team for a demo and was never locked down.\n\n**Approach**:\n1. Run `aws s3api get-bucket-acl` and find a grant to `AllUsers` with `READ` permission\n2. Check `get-bucket-policy` and discover a policy with `Principal: \"*\"` and `s3:GetObject`\n3. Confirm Block Public Access is not enabled at the bucket or account level\n4. Enumerate bucket contents to assess data sensitivity\n5. Immediately enable Block Public Access on the bucket\n6. Review CloudTrail S3 data events to determine if unauthorized access occurred\n7. Report the finding with timeline, data inventory, and remediation confirmation\n\n**Pitfalls**: Enabling Block Public Access can break applications that intentionally serve content publicly (static websites). Always verify the bucket's intended use before applying restrictions. Check for CloudFront distributions or other services relying on the bucket's public access.\n\n## Output Format\n\n```\nS3 Bucket Permissions Audit Report\n=====================================\nAccount: 123456789012 (Production)\nDate: 2026-02-23\nAuditor: Security Engineering Team\nTotal Buckets: 47\n\nACCOUNT-LEVEL SETTINGS:\n  Block Public Access: ENABLED (all four settings)\n\nCRITICAL FINDINGS:\n[S3-001] Public Read Access via ACL\n  Bucket: marketing-assets-prod\n  Issue: AllUsers group granted READ permission via ACL\n  Risk: Any internet user can list and download bucket contents\n  Data Sensitivity: Contains customer-facing but non-sensitive marketing assets\n  Remediation: Remove AllUsers ACL grant, enable Block Public Access\n\n[S3-002] Wildcard Principal in Bucket Policy\n  Bucket: data-exchange-partner\n  Issue: Policy allows s3:GetObject with Principal \"*\" and no VPC\u002FIP condition\n  Risk: Intended for partner access but accessible to anyone with the bucket name\n  Remediation: Add aws:SourceVpce or aws:SourceIp condition to restrict access\n\nSUMMARY:\n  Buckets with public access:           3 \u002F 47\n  Buckets without encryption:           5 \u002F 47\n  Buckets without versioning:          12 \u002F 47\n  Buckets without access logging:      18 \u002F 47\n  Buckets with overly broad policies:   7 \u002F 47\n```\n","# Auditing AWS S3 Bucket Permissions\n\n## When to Use\n\n- When conducting a security assessment of AWS environments to identify publicly exposed data\n- When onboarding a new AWS account and establishing a security baseline for storage resources\n- When responding to an alert about potential S3 data exposure from AWS Trusted Advisor or Security Hub\n- When compliance frameworks (SOC 2, PCI DSS, HIPAA) require periodic review of data access controls\n- When a breach or credential compromise necessitates immediate review of all accessible S3 resources\n\n**Do not use** for auditing non-AWS object storage (use provider-specific tools), for real-time monitoring (use S3 Event Notifications with Lambda), or for auditing S3 access patterns (use S3 Access Analyzer or CloudTrail S3 data events).\n\n## Prerequisites\n\n- AWS CLI v2 configured with credentials that have `s3:GetBucketPolicy`, `s3:GetBucketAcl`, `s3:GetBucketPublicAccessBlock`, `s3:GetEncryptionConfiguration`, and `s3:ListAllMyBuckets` permissions\n- Prowler installed (`pip install prowler`) for automated CIS benchmark checks\n- S3audit or similar enumeration tool for quick public bucket detection\n- Access to AWS Organizations if auditing across multiple accounts\n- Python 3.8+ with boto3 for custom audit scripts\n\n## Workflow\n\n### Step 1: Enumerate All S3 Buckets and Account-Level Block Public Access\n\nCheck the account-level S3 Block Public Access settings first, then list all buckets with their regions.\n\n```bash\n# Check account-level S3 Block Public Access settings\naws s3control get-public-access-block \\\n  --account-id $(aws sts get-caller-identity --query Account --output text) \\\n  --output json\n\n# List all buckets with creation dates\naws s3api list-buckets \\\n  --query 'Buckets[*].[Name,CreationDate]' \\\n  --output table\n\n# Get bucket regions for each bucket\nfor bucket in $(aws s3api list-buckets --query 'Buckets[*].Name' --output text); do\n  region=$(aws s3api get-bucket-location --bucket \"$bucket\" --query 'LocationConstraint' --output text)\n  echo \"$bucket -> ${region:-us-east-1}\"\ndone\n```\n\n### Step 2: Check Each Bucket's Public Access Block and ACL Configuration\n\nIterate through all buckets to evaluate their individual public access blocks and ACL grants.\n\n```bash\n# Check per-bucket Block Public Access settings\nfor bucket in $(aws s3api list-buckets --query 'Buckets[*].Name' --output text); do\n  echo \"=== $bucket ===\"\n  aws s3api get-public-access-block --bucket \"$bucket\" 2>\u002Fdev\u002Fnull || echo \"  No Block Public Access configured\"\n\n  # Check ACL for public grants\n  aws s3api get-bucket-acl --bucket \"$bucket\" \\\n    --query 'Grants[?Grantee.URI==`http:\u002F\u002Facs.amazonaws.com\u002Fgroups\u002Fglobal\u002FAllUsers` || Grantee.URI==`http:\u002F\u002Facs.amazonaws.com\u002Fgroups\u002Fglobal\u002FAuthenticatedUsers`]' \\\n    --output json\ndone\n```\n\n### Step 3: Analyze Bucket Policies for Overly Permissive Access\n\nReview bucket policies for wildcard principals, missing conditions, and statements that allow broad access.\n\n```bash\n# Extract and analyze bucket policies\nfor bucket in $(aws s3api list-buckets --query 'Buckets[*].Name' --output text); do\n  policy=$(aws s3api get-bucket-policy --bucket \"$bucket\" --output text 2>\u002Fdev\u002Fnull)\n  if [ -n \"$policy\" ]; then\n    echo \"=== $bucket policy ===\"\n    echo \"$policy\" | python3 -c \"\nimport json, sys\npolicy = json.load(sys.stdin)\nfor stmt in policy.get('Statement', []):\n    principal = stmt.get('Principal', {})\n    effect = stmt.get('Effect', '')\n    if principal == '*' or principal == {'AWS': '*'}:\n        print(f'  WARNING: {effect} with wildcard principal')\n        print(f'  Actions: {stmt.get(\\\"Action\\\", \\\"\\\")}')\n        print(f'  Condition: {stmt.get(\\\"Condition\\\", \\\"NONE\\\")}')\n\"\n  fi\ndone\n```\n\n### Step 4: Verify Encryption and Versioning Settings\n\nCheck that all buckets have server-side encryption enabled and versioning configured for data protection.\n\n```bash\n# Check encryption and versioning status for all buckets\nfor bucket in $(aws s3api list-buckets --query 'Buckets[*].Name' --output text); do\n  echo \"=== $bucket ===\"\n\n  # Encryption configuration\n  aws s3api get-bucket-encryption --bucket \"$bucket\" 2>\u002Fdev\u002Fnull \\\n    && echo \"  Encryption: ENABLED\" \\\n    || echo \"  Encryption: DISABLED\"\n\n  # Versioning status\n  aws s3api get-bucket-versioning --bucket \"$bucket\" \\\n    --query 'Status' --output text\n\n  # Logging status\n  aws s3api get-bucket-logging --bucket \"$bucket\" \\\n    --query 'LoggingEnabled' --output text 2>\u002Fdev\u002Fnull\ndone\n```\n\n### Step 5: Run Prowler S3-Specific Checks\n\nExecute Prowler's S3-focused checks aligned with CIS AWS Foundations Benchmark.\n\n```bash\n# Run Prowler S3-specific checks\nprowler aws \\\n  --checks s3_bucket_public_access \\\n           s3_bucket_default_encryption \\\n           s3_bucket_policy_public_write_access \\\n           s3_bucket_server_access_logging_enabled \\\n           s3_bucket_versioning_enabled \\\n           s3_bucket_acl_prohibited \\\n  -M json-ocsf \\\n  -o .\u002Fprowler-s3-audit\u002F\n\n# View summary\nprowler aws --checks s3 -M csv -o .\u002Fprowler-s3-audit\u002F\n```\n\n### Step 6: Use IAM Access Analyzer for S3 Public and Cross-Account Findings\n\nLeverage IAM Access Analyzer to identify buckets shared externally or publicly.\n\n```bash\n# List Access Analyzer findings for S3\naws accessanalyzer list-findings \\\n  --analyzer-arn $(aws accessanalyzer list-analyzers --query 'analyzers[0].arn' --output text) \\\n  --filter '{\"resourceType\": {\"eq\": [\"AWS::S3::Bucket\"]}}' \\\n  --query 'findings[*].[resource,status,condition,principal]' \\\n  --output table\n\n# Create an analyzer if one does not exist\naws accessanalyzer create-analyzer \\\n  --analyzer-name s3-access-audit \\\n  --type ACCOUNT\n```\n\n### Step 7: Generate Audit Report and Remediate\n\nCompile findings into an actionable report and apply remediation for critical issues.\n\n```bash\n# Quick remediation: Enable Block Public Access on a bucket\naws s3api put-public-access-block \\\n  --bucket TARGET_BUCKET \\\n  --public-access-block-configuration \\\n  'BlockPublicAcls=true,IgnorePublicAcls=true,BlockPublicPolicy=true,RestrictPublicBuckets=true'\n\n# Enable default encryption with SSE-S3\naws s3api put-bucket-encryption \\\n  --bucket TARGET_BUCKET \\\n  --server-side-encryption-configuration \\\n  '{\"Rules\":[{\"ApplyServerSideEncryptionByDefault\":{\"SSEAlgorithm\":\"aws:kms\",\"KMSMasterKeyID\":\"alias\u002Faws\u002Fs3\"},\"BucketKeyEnabled\":true}]}'\n\n# Enable versioning\naws s3api put-bucket-versioning \\\n  --bucket TARGET_BUCKET \\\n  --versioning-configuration Status=Enabled\n```\n\n## Key Concepts\n\n| Term | Definition |\n|------|------------|\n| S3 Block Public Access | Account-level and bucket-level settings that override ACLs and policies to prevent public access regardless of individual resource configurations |\n| Bucket Policy | JSON-based resource policy attached to a bucket that defines who can access the bucket and what actions they can perform |\n| ACL (Access Control List) | Legacy S3 access control mechanism granting permissions to AWS accounts or predefined groups like AllUsers or AuthenticatedUsers |\n| IAM Access Analyzer | AWS service that analyzes resource policies to identify resources shared with external entities or the public |\n| Server-Side Encryption | Encryption applied by S3 at the object level using SSE-S3, SSE-KMS, or SSE-C before writing data to disk |\n| CIS AWS Foundations Benchmark | Security best practice standard from Center for Internet Security with specific controls for S3 bucket configuration |\n\n## Tools & Systems\n\n- **AWS CLI**: Primary interface for querying S3 bucket configurations, policies, ACLs, and encryption settings\n- **Prowler**: Open-source security tool with 50+ S3-specific checks aligned to CIS, PCI DSS, and HIPAA controls\n- **IAM Access Analyzer**: AWS-native service for continuous monitoring of resource policies that grant external access\n- **S3audit**: Lightweight tool for quick enumeration of public S3 buckets across an account\n- **ScoutSuite**: Multi-cloud auditing tool that collects S3 configuration data and generates risk-scored HTML reports\n\n## Common Scenarios\n\n### Scenario: Identifying a Publicly Readable Bucket Containing Customer Data\n\n**Context**: A security engineer receives a Trusted Advisor alert about a publicly accessible S3 bucket. The bucket was created by a development team for a demo and was never locked down.\n\n**Approach**:\n1. Run `aws s3api get-bucket-acl` and find a grant to `AllUsers` with `READ` permission\n2. Check `get-bucket-policy` and discover a policy with `Principal: \"*\"` and `s3:GetObject`\n3. Confirm Block Public Access is not enabled at the bucket or account level\n4. Enumerate bucket contents to assess data sensitivity\n5. Immediately enable Block Public Access on the bucket\n6. Review CloudTrail S3 data events to determine if unauthorized access occurred\n7. Report the finding with timeline, data inventory, and remediation confirmation\n\n**Pitfalls**: Enabling Block Public Access can break applications that intentionally serve content publicly (static websites). Always verify the bucket's intended use before applying restrictions. Check for CloudFront distributions or other services relying on the bucket's public access.\n\n## Output Format\n\n```\nS3 Bucket Permissions Audit Report\n=====================================\nAccount: 123456789012 (Production)\nDate: 2026-02-23\nAuditor: Security Engineering Team\nTotal Buckets: 47\n\nACCOUNT-LEVEL SETTINGS:\n  Block Public Access: ENABLED (all four settings)\n\nCRITICAL FINDINGS:\n[S3-001] Public Read Access via ACL\n  Bucket: marketing-assets-prod\n  Issue: AllUsers group granted READ permission via ACL\n  Risk: Any internet user can list and download bucket contents\n  Data Sensitivity: Contains customer-facing but non-sensitive marketing assets\n  Remediation: Remove AllUsers ACL grant, enable Block Public Access\n\n[S3-002] Wildcard Principal in Bucket Policy\n  Bucket: data-exchange-partner\n  Issue: Policy allows s3:GetObject with Principal \"*\" and no VPC\u002FIP condition\n  Risk: Intended for partner access but accessible to anyone with the bucket name\n  Remediation: Add aws:SourceVpce or aws:SourceIp condition to restrict access\n\nSUMMARY:\n  Buckets with public access:           3 \u002F 47\n  Buckets without encryption:           5 \u002F 47\n  Buckets without versioning:          12 \u002F 47\n  Buckets without access logging:      18 \u002F 47\n  Buckets with overly broad policies:   7 \u002F 47\n```\n",{"name":5,"tags":54,"author":58,"domain":47,"license":15,"version":59,"nist_csf":60,"subdomain":44,"description":65,"mitre_attack":66},[44,32,31,55,56,57],"bucket-permissions","data-protection","access-control","mahipal","1.0",[61,62,63,64],"PR.IR-01","ID.AM-08","GV.SC-06","DE.CM-01","Systematically audit AWS S3 bucket permissions to identify publicly accessible buckets, overly permissive ACLs, misconfigured bucket policies, and missing encryption settings using AWS CLI, S3audit, and Prowler to enforce least-privilege data access controls.\n",[67,68,69,70,71],"T1530","T1619","T1078.004","T1537","T1567.002","main","7925716f065257435fdb12e97f7e52842147d5ad",".claude\u002Fskills\u002Fauditing-aws-s3-bucket-permissions","https:\u002F\u002Fgithub.com\u002Fhenriquescastilho\u002Fmy-claude","https:\u002F\u002Fclaude.com\u002Fclaude-code","https:\u002F\u002Fgithub.com\u002Fhenriquescastilho","Software · Applied AI · Quantitative Modeling · Building with Claude.","2026-06-10 12:24:46",{"source":8,"skillName":5,"commands":81,"prompt":91,"zipAvailable":92},[82,85,88],{"tool":83,"command":84},"npx","npx skills add henriquescastilho\u002Fmy-claude --skill auditing-aws-s3-bucket-permissions",{"tool":86,"command":87},"bunx","bunx skills add henriquescastilho\u002Fmy-claude --skill auditing-aws-s3-bucket-permissions",{"tool":89,"command":90},"pnpm","pnpm dlx skills add henriquescastilho\u002Fmy-claude --skill auditing-aws-s3-bucket-permissions","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002Fhenriquescastilho\u002Fmy-claude\u002Fblob\u002Fmain\u002F.claude\u002Fskills\u002Fauditing-aws-s3-bucket-permissions\u002FSKILL.md",true,[94,100,105,109,113,117,121,125,129,133,137,141,145,149,153,157,161,165,169,173,177,181,185,189,193,197,201,205,209,213,217,221,225,229,233,237,241,245,249,253,256,260,264,268,272,276,280,284,288,292,296,300,304,308,312,316,320,324,328,332,336,340,344,348,352,356,360,364,368,372,376,380,384,388,392,395,399,403],{"path":95,"resourceType":96,"resourceTypeDesc":97,"sizeBytes":98,"sourceHtmlUrl":99},"AGENTS.md","REFERENCE","参考文档",108261,"https:\u002F\u002Fgithub.com\u002FAb0umar\u002Fselrs.cc\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fvercel-react-best-practices\u002FAGENTS.md",{"path":101,"resourceType":101,"resourceTypeDesc":102,"sizeBytes":103,"sourceHtmlUrl":104},"LICENSE","许可证",11255,"https:\u002F\u002Fgithub.com\u002Fhenriquescastilho\u002Fmy-claude\u002Fblob\u002Fmain\u002F.claude\u002Fskills\u002Fauditing-aws-s3-bucket-permissions\u002FLICENSE",{"path":106,"resourceType":96,"resourceTypeDesc":97,"sizeBytes":107,"sourceHtmlUrl":108},"metadata.json",921,"https:\u002F\u002Fgithub.com\u002FAb0umar\u002Fselrs.cc\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fvercel-react-best-practices\u002Fmetadata.json",{"path":110,"resourceType":96,"resourceTypeDesc":97,"sizeBytes":111,"sourceHtmlUrl":112},"README.md",3360,"https:\u002F\u002Fgithub.com\u002FAb0umar\u002Fselrs.cc\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fvercel-react-best-practices\u002FREADME.md",{"path":114,"resourceType":96,"resourceTypeDesc":97,"sizeBytes":115,"sourceHtmlUrl":116},"references\u002Fapi-reference.md",2394,"https:\u002F\u002Fgithub.com\u002Fhenriquescastilho\u002Fmy-claude\u002Fblob\u002Fmain\u002F.claude\u002Fskills\u002Fauditing-aws-s3-bucket-permissions\u002Freferences\u002Fapi-reference.md",{"path":118,"resourceType":96,"resourceTypeDesc":97,"sizeBytes":119,"sourceHtmlUrl":120},"rules\u002F_sections.md",1554,"https:\u002F\u002Fgithub.com\u002FAb0umar\u002Fselrs.cc\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fvercel-react-best-practices\u002Frules\u002F_sections.md",{"path":122,"resourceType":96,"resourceTypeDesc":97,"sizeBytes":123,"sourceHtmlUrl":124},"rules\u002F_template.md",631,"https:\u002F\u002Fgithub.com\u002FAb0umar\u002Fselrs.cc\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fvercel-react-best-practices\u002Frules\u002F_template.md",{"path":126,"resourceType":96,"resourceTypeDesc":97,"sizeBytes":127,"sourceHtmlUrl":128},"rules\u002Fadvanced-effect-event-deps.md",1802,"https:\u002F\u002Fgithub.com\u002FAb0umar\u002Fselrs.cc\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fvercel-react-best-practices\u002Frules\u002Fadvanced-effect-event-deps.md",{"path":130,"resourceType":96,"resourceTypeDesc":97,"sizeBytes":131,"sourceHtmlUrl":132},"rules\u002Fadvanced-event-handler-refs.md",1483,"https:\u002F\u002Fgithub.com\u002FAb0umar\u002Fselrs.cc\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fvercel-react-best-practices\u002Frules\u002Fadvanced-event-handler-refs.md",{"path":134,"resourceType":96,"resourceTypeDesc":97,"sizeBytes":135,"sourceHtmlUrl":136},"rules\u002Fadvanced-init-once.md",958,"https:\u002F\u002Fgithub.com\u002FAb0umar\u002Fselrs.cc\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fvercel-react-best-practices\u002Frules\u002Fadvanced-init-once.md",{"path":138,"resourceType":96,"resourceTypeDesc":97,"sizeBytes":139,"sourceHtmlUrl":140},"rules\u002Fadvanced-use-latest.md",1072,"https:\u002F\u002Fgithub.com\u002FAb0umar\u002Fselrs.cc\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fvercel-react-best-practices\u002Frules\u002Fadvanced-use-latest.md",{"path":142,"resourceType":96,"resourceTypeDesc":97,"sizeBytes":143,"sourceHtmlUrl":144},"rules\u002Fasync-api-routes.md",1125,"https:\u002F\u002Fgithub.com\u002FAb0umar\u002Fselrs.cc\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fvercel-react-best-practices\u002Frules\u002Fasync-api-routes.md",{"path":146,"resourceType":96,"resourceTypeDesc":97,"sizeBytes":147,"sourceHtmlUrl":148},"rules\u002Fasync-cheap-condition-before-await.md",1220,"https:\u002F\u002Fgithub.com\u002FAb0umar\u002Fselrs.cc\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fvercel-react-best-practices\u002Frules\u002Fasync-cheap-condition-before-await.md",{"path":150,"resourceType":96,"resourceTypeDesc":97,"sizeBytes":151,"sourceHtmlUrl":152},"rules\u002Fasync-defer-await.md",2208,"https:\u002F\u002Fgithub.com\u002FAb0umar\u002Fselrs.cc\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fvercel-react-best-practices\u002Frules\u002Fasync-defer-await.md",{"path":154,"resourceType":96,"resourceTypeDesc":97,"sizeBytes":155,"sourceHtmlUrl":156},"rules\u002Fasync-dependencies.md",1293,"https:\u002F\u002Fgithub.com\u002FAb0umar\u002Fselrs.cc\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fvercel-react-best-practices\u002Frules\u002Fasync-dependencies.md",{"path":158,"resourceType":96,"resourceTypeDesc":97,"sizeBytes":159,"sourceHtmlUrl":160},"rules\u002Fasync-parallel.md",654,"https:\u002F\u002Fgithub.com\u002FAb0umar\u002Fselrs.cc\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fvercel-react-best-practices\u002Frules\u002Fasync-parallel.md",{"path":162,"resourceType":96,"resourceTypeDesc":97,"sizeBytes":163,"sourceHtmlUrl":164},"rules\u002Fasync-suspense-boundaries.md",2510,"https:\u002F\u002Fgithub.com\u002FAb0umar\u002Fselrs.cc\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fvercel-react-best-practices\u002Frules\u002Fasync-suspense-boundaries.md",{"path":166,"resourceType":96,"resourceTypeDesc":97,"sizeBytes":167,"sourceHtmlUrl":168},"rules\u002Fbundle-analyzable-paths.md",2382,"https:\u002F\u002Fgithub.com\u002FAb0umar\u002Fselrs.cc\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fvercel-react-best-practices\u002Frules\u002Fbundle-analyzable-paths.md",{"path":170,"resourceType":96,"resourceTypeDesc":97,"sizeBytes":171,"sourceHtmlUrl":172},"rules\u002Fbundle-barrel-imports.md",2795,"https:\u002F\u002Fgithub.com\u002FAb0umar\u002Fselrs.cc\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fvercel-react-best-practices\u002Frules\u002Fbundle-barrel-imports.md",{"path":174,"resourceType":96,"resourceTypeDesc":97,"sizeBytes":175,"sourceHtmlUrl":176},"rules\u002Fbundle-conditional.md",949,"https:\u002F\u002Fgithub.com\u002FAb0umar\u002Fselrs.cc\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fvercel-react-best-practices\u002Frules\u002Fbundle-conditional.md",{"path":178,"resourceType":96,"resourceTypeDesc":97,"sizeBytes":179,"sourceHtmlUrl":180},"rules\u002Fbundle-defer-third-party.md",920,"https:\u002F\u002Fgithub.com\u002FAb0umar\u002Fselrs.cc\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fvercel-react-best-practices\u002Frules\u002Fbundle-defer-third-party.md",{"path":182,"resourceType":96,"resourceTypeDesc":97,"sizeBytes":183,"sourceHtmlUrl":184},"rules\u002Fbundle-dynamic-imports.md",791,"https:\u002F\u002Fgithub.com\u002FAb0umar\u002Fselrs.cc\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fvercel-react-best-practices\u002Frules\u002Fbundle-dynamic-imports.md",{"path":186,"resourceType":96,"resourceTypeDesc":97,"sizeBytes":187,"sourceHtmlUrl":188},"rules\u002Fbundle-preload.md",1149,"https:\u002F\u002Fgithub.com\u002FAb0umar\u002Fselrs.cc\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fvercel-react-best-practices\u002Frules\u002Fbundle-preload.md",{"path":190,"resourceType":96,"resourceTypeDesc":97,"sizeBytes":191,"sourceHtmlUrl":192},"rules\u002Fclient-event-listeners.md",1969,"https:\u002F\u002Fgithub.com\u002FAb0umar\u002Fselrs.cc\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fvercel-react-best-practices\u002Frules\u002Fclient-event-listeners.md",{"path":194,"resourceType":96,"resourceTypeDesc":97,"sizeBytes":195,"sourceHtmlUrl":196},"rules\u002Fclient-localstorage-schema.md",1950,"https:\u002F\u002Fgithub.com\u002FAb0umar\u002Fselrs.cc\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fvercel-react-best-practices\u002Frules\u002Fclient-localstorage-schema.md",{"path":198,"resourceType":96,"resourceTypeDesc":97,"sizeBytes":199,"sourceHtmlUrl":200},"rules\u002Fclient-passive-event-listeners.md",1644,"https:\u002F\u002Fgithub.com\u002FAb0umar\u002Fselrs.cc\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fvercel-react-best-practices\u002Frules\u002Fclient-passive-event-listeners.md",{"path":202,"resourceType":96,"resourceTypeDesc":97,"sizeBytes":203,"sourceHtmlUrl":204},"rules\u002Fclient-swr-dedup.md",1159,"https:\u002F\u002Fgithub.com\u002FAb0umar\u002Fselrs.cc\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fvercel-react-best-practices\u002Frules\u002Fclient-swr-dedup.md",{"path":206,"resourceType":96,"resourceTypeDesc":97,"sizeBytes":207,"sourceHtmlUrl":208},"rules\u002Fjs-batch-dom-css.md",3266,"https:\u002F\u002Fgithub.com\u002FAb0umar\u002Fselrs.cc\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fvercel-react-best-practices\u002Frules\u002Fjs-batch-dom-css.md",{"path":210,"resourceType":96,"resourceTypeDesc":97,"sizeBytes":211,"sourceHtmlUrl":212},"rules\u002Fjs-cache-function-results.md",1949,"https:\u002F\u002Fgithub.com\u002FAb0umar\u002Fselrs.cc\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fvercel-react-best-practices\u002Frules\u002Fjs-cache-function-results.md",{"path":214,"resourceType":96,"resourceTypeDesc":97,"sizeBytes":215,"sourceHtmlUrl":216},"rules\u002Fjs-cache-property-access.md",532,"https:\u002F\u002Fgithub.com\u002FAb0umar\u002Fselrs.cc\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fvercel-react-best-practices\u002Frules\u002Fjs-cache-property-access.md",{"path":218,"resourceType":96,"resourceTypeDesc":97,"sizeBytes":219,"sourceHtmlUrl":220},"rules\u002Fjs-cache-storage.md",1651,"https:\u002F\u002Fgithub.com\u002FAb0umar\u002Fselrs.cc\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fvercel-react-best-practices\u002Frules\u002Fjs-cache-storage.md",{"path":222,"resourceType":96,"resourceTypeDesc":97,"sizeBytes":223,"sourceHtmlUrl":224},"rules\u002Fjs-combine-iterations.md",753,"https:\u002F\u002Fgithub.com\u002FAb0umar\u002Fselrs.cc\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fvercel-react-best-practices\u002Frules\u002Fjs-combine-iterations.md",{"path":226,"resourceType":96,"resourceTypeDesc":97,"sizeBytes":227,"sourceHtmlUrl":228},"rules\u002Fjs-early-exit.md",1133,"https:\u002F\u002Fgithub.com\u002FAb0umar\u002Fselrs.cc\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fvercel-react-best-practices\u002Frules\u002Fjs-early-exit.md",{"path":230,"resourceType":96,"resourceTypeDesc":97,"sizeBytes":231,"sourceHtmlUrl":232},"rules\u002Fjs-flatmap-filter.md",1411,"https:\u002F\u002Fgithub.com\u002FAb0umar\u002Fselrs.cc\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fvercel-react-best-practices\u002Frules\u002Fjs-flatmap-filter.md",{"path":234,"resourceType":96,"resourceTypeDesc":97,"sizeBytes":235,"sourceHtmlUrl":236},"rules\u002Fjs-hoist-regexp.md",1028,"https:\u002F\u002Fgithub.com\u002FAb0umar\u002Fselrs.cc\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fvercel-react-best-practices\u002Frules\u002Fjs-hoist-regexp.md",{"path":238,"resourceType":96,"resourceTypeDesc":97,"sizeBytes":239,"sourceHtmlUrl":240},"rules\u002Fjs-index-maps.md",837,"https:\u002F\u002Fgithub.com\u002FAb0umar\u002Fselrs.cc\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fvercel-react-best-practices\u002Frules\u002Fjs-index-maps.md",{"path":242,"resourceType":96,"resourceTypeDesc":97,"sizeBytes":243,"sourceHtmlUrl":244},"rules\u002Fjs-length-check-first.md",1747,"https:\u002F\u002Fgithub.com\u002FAb0umar\u002Fselrs.cc\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fvercel-react-best-practices\u002Frules\u002Fjs-length-check-first.md",{"path":246,"resourceType":96,"resourceTypeDesc":97,"sizeBytes":247,"sourceHtmlUrl":248},"rules\u002Fjs-min-max-loop.md",2290,"https:\u002F\u002Fgithub.com\u002FAb0umar\u002Fselrs.cc\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fvercel-react-best-practices\u002Frules\u002Fjs-min-max-loop.md",{"path":250,"resourceType":96,"resourceTypeDesc":97,"sizeBytes":251,"sourceHtmlUrl":252},"rules\u002Fjs-request-idle-callback.md",2647,"https:\u002F\u002Fgithub.com\u002FAb0umar\u002Fselrs.cc\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fvercel-react-best-practices\u002Frules\u002Fjs-request-idle-callback.md",{"path":254,"resourceType":96,"resourceTypeDesc":97,"sizeBytes":215,"sourceHtmlUrl":255},"rules\u002Fjs-set-map-lookups.md","https:\u002F\u002Fgithub.com\u002FAb0umar\u002Fselrs.cc\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fvercel-react-best-practices\u002Frules\u002Fjs-set-map-lookups.md",{"path":257,"resourceType":96,"resourceTypeDesc":97,"sizeBytes":258,"sourceHtmlUrl":259},"rules\u002Fjs-tosorted-immutable.md",1782,"https:\u002F\u002Fgithub.com\u002FAb0umar\u002Fselrs.cc\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fvercel-react-best-practices\u002Frules\u002Fjs-tosorted-immutable.md",{"path":261,"resourceType":96,"resourceTypeDesc":97,"sizeBytes":262,"sourceHtmlUrl":263},"rules\u002Frendering-activity.md",564,"https:\u002F\u002Fgithub.com\u002FAb0umar\u002Fselrs.cc\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fvercel-react-best-practices\u002Frules\u002Frendering-activity.md",{"path":265,"resourceType":96,"resourceTypeDesc":97,"sizeBytes":266,"sourceHtmlUrl":267},"rules\u002Frendering-animate-svg-wrapper.md",1185,"https:\u002F\u002Fgithub.com\u002FAb0umar\u002Fselrs.cc\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fvercel-react-best-practices\u002Frules\u002Frendering-animate-svg-wrapper.md",{"path":269,"resourceType":96,"resourceTypeDesc":97,"sizeBytes":270,"sourceHtmlUrl":271},"rules\u002Frendering-conditional-render.md",980,"https:\u002F\u002Fgithub.com\u002FAb0umar\u002Fselrs.cc\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fvercel-react-best-practices\u002Frules\u002Frendering-conditional-render.md",{"path":273,"resourceType":96,"resourceTypeDesc":97,"sizeBytes":274,"sourceHtmlUrl":275},"rules\u002Frendering-content-visibility.md",815,"https:\u002F\u002Fgithub.com\u002FAb0umar\u002Fselrs.cc\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fvercel-react-best-practices\u002Frules\u002Frendering-content-visibility.md",{"path":277,"resourceType":96,"resourceTypeDesc":97,"sizeBytes":278,"sourceHtmlUrl":279},"rules\u002Frendering-hoist-jsx.md",1039,"https:\u002F\u002Fgithub.com\u002FAb0umar\u002Fselrs.cc\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fvercel-react-best-practices\u002Frules\u002Frendering-hoist-jsx.md",{"path":281,"resourceType":96,"resourceTypeDesc":97,"sizeBytes":282,"sourceHtmlUrl":283},"rules\u002Frendering-hydration-no-flicker.md",2308,"https:\u002F\u002Fgithub.com\u002FAb0umar\u002Fselrs.cc\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fvercel-react-best-practices\u002Frules\u002Frendering-hydration-no-flicker.md",{"path":285,"resourceType":96,"resourceTypeDesc":97,"sizeBytes":286,"sourceHtmlUrl":287},"rules\u002Frendering-hydration-suppress-warning.md",872,"https:\u002F\u002Fgithub.com\u002FAb0umar\u002Fselrs.cc\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fvercel-react-best-practices\u002Frules\u002Frendering-hydration-suppress-warning.md",{"path":289,"resourceType":96,"resourceTypeDesc":97,"sizeBytes":290,"sourceHtmlUrl":291},"rules\u002Frendering-resource-hints.md",2549,"https:\u002F\u002Fgithub.com\u002FAb0umar\u002Fselrs.cc\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fvercel-react-best-practices\u002Frules\u002Frendering-resource-hints.md",{"path":293,"resourceType":96,"resourceTypeDesc":97,"sizeBytes":294,"sourceHtmlUrl":295},"rules\u002Frendering-script-defer-async.md",1868,"https:\u002F\u002Fgithub.com\u002FAb0umar\u002Fselrs.cc\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fvercel-react-best-practices\u002Frules\u002Frendering-script-defer-async.md",{"path":297,"resourceType":96,"resourceTypeDesc":97,"sizeBytes":298,"sourceHtmlUrl":299},"rules\u002Frendering-svg-precision.md",588,"https:\u002F\u002Fgithub.com\u002FAb0umar\u002Fselrs.cc\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fvercel-react-best-practices\u002Frules\u002Frendering-svg-precision.md",{"path":301,"resourceType":96,"resourceTypeDesc":97,"sizeBytes":302,"sourceHtmlUrl":303},"rules\u002Frendering-usetransition-loading.md",2074,"https:\u002F\u002Fgithub.com\u002FAb0umar\u002Fselrs.cc\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fvercel-react-best-practices\u002Frules\u002Frendering-usetransition-loading.md",{"path":305,"resourceType":96,"resourceTypeDesc":97,"sizeBytes":306,"sourceHtmlUrl":307},"rules\u002Frerender-defer-reads.md",973,"https:\u002F\u002Fgithub.com\u002FAb0umar\u002Fselrs.cc\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fvercel-react-best-practices\u002Frules\u002Frerender-defer-reads.md",{"path":309,"resourceType":96,"resourceTypeDesc":97,"sizeBytes":310,"sourceHtmlUrl":311},"rules\u002Frerender-dependencies.md",824,"https:\u002F\u002Fgithub.com\u002FAb0umar\u002Fselrs.cc\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fvercel-react-best-practices\u002Frules\u002Frerender-dependencies.md",{"path":313,"resourceType":96,"resourceTypeDesc":97,"sizeBytes":314,"sourceHtmlUrl":315},"rules\u002Frerender-derived-state-no-effect.md",1201,"https:\u002F\u002Fgithub.com\u002FAb0umar\u002Fselrs.cc\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fvercel-react-best-practices\u002Frules\u002Frerender-derived-state-no-effect.md",{"path":317,"resourceType":96,"resourceTypeDesc":97,"sizeBytes":318,"sourceHtmlUrl":319},"rules\u002Frerender-derived-state.md",728,"https:\u002F\u002Fgithub.com\u002FAb0umar\u002Fselrs.cc\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fvercel-react-best-practices\u002Frules\u002Frerender-derived-state.md",{"path":321,"resourceType":96,"resourceTypeDesc":97,"sizeBytes":322,"sourceHtmlUrl":323},"rules\u002Frerender-functional-setstate.md",2968,"https:\u002F\u002Fgithub.com\u002FAb0umar\u002Fselrs.cc\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fvercel-react-best-practices\u002Frules\u002Frerender-functional-setstate.md",{"path":325,"resourceType":96,"resourceTypeDesc":97,"sizeBytes":326,"sourceHtmlUrl":327},"rules\u002Frerender-lazy-state-init.md",2016,"https:\u002F\u002Fgithub.com\u002FAb0umar\u002Fselrs.cc\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fvercel-react-best-practices\u002Frules\u002Frerender-lazy-state-init.md",{"path":329,"resourceType":96,"resourceTypeDesc":97,"sizeBytes":330,"sourceHtmlUrl":331},"rules\u002Frerender-memo-with-default-value.md",1173,"https:\u002F\u002Fgithub.com\u002FAb0umar\u002Fselrs.cc\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fvercel-react-best-practices\u002Frules\u002Frerender-memo-with-default-value.md",{"path":333,"resourceType":96,"resourceTypeDesc":97,"sizeBytes":334,"sourceHtmlUrl":335},"rules\u002Frerender-memo.md",1148,"https:\u002F\u002Fgithub.com\u002FAb0umar\u002Fselrs.cc\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fvercel-react-best-practices\u002Frules\u002Frerender-memo.md",{"path":337,"resourceType":96,"resourceTypeDesc":97,"sizeBytes":338,"sourceHtmlUrl":339},"rules\u002Frerender-move-effect-to-event.md",1268,"https:\u002F\u002Fgithub.com\u002FAb0umar\u002Fselrs.cc\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fvercel-react-best-practices\u002Frules\u002Frerender-move-effect-to-event.md",{"path":341,"resourceType":96,"resourceTypeDesc":97,"sizeBytes":342,"sourceHtmlUrl":343},"rules\u002Frerender-no-inline-components.md",2135,"https:\u002F\u002Fgithub.com\u002FAb0umar\u002Fselrs.cc\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fvercel-react-best-practices\u002Frules\u002Frerender-no-inline-components.md",{"path":345,"resourceType":96,"resourceTypeDesc":97,"sizeBytes":346,"sourceHtmlUrl":347},"rules\u002Frerender-simple-expression-in-memo.md",1018,"https:\u002F\u002Fgithub.com\u002FAb0umar\u002Fselrs.cc\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fvercel-react-best-practices\u002Frules\u002Frerender-simple-expression-in-memo.md",{"path":349,"resourceType":96,"resourceTypeDesc":97,"sizeBytes":350,"sourceHtmlUrl":351},"rules\u002Frerender-split-combined-hooks.md",1844,"https:\u002F\u002Fgithub.com\u002FAb0umar\u002Fselrs.cc\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fvercel-react-best-practices\u002Frules\u002Frerender-split-combined-hooks.md",{"path":353,"resourceType":96,"resourceTypeDesc":97,"sizeBytes":354,"sourceHtmlUrl":355},"rules\u002Frerender-transitions.md",1055,"https:\u002F\u002Fgithub.com\u002FAb0umar\u002Fselrs.cc\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fvercel-react-best-practices\u002Frules\u002Frerender-transitions.md",{"path":357,"resourceType":96,"resourceTypeDesc":97,"sizeBytes":358,"sourceHtmlUrl":359},"rules\u002Frerender-use-deferred-value.md",1846,"https:\u002F\u002Fgithub.com\u002FAb0umar\u002Fselrs.cc\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fvercel-react-best-practices\u002Frules\u002Frerender-use-deferred-value.md",{"path":361,"resourceType":96,"resourceTypeDesc":97,"sizeBytes":362,"sourceHtmlUrl":363},"rules\u002Frerender-use-ref-transient-values.md",1742,"https:\u002F\u002Fgithub.com\u002FAb0umar\u002Fselrs.cc\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fvercel-react-best-practices\u002Frules\u002Frerender-use-ref-transient-values.md",{"path":365,"resourceType":96,"resourceTypeDesc":97,"sizeBytes":366,"sourceHtmlUrl":367},"rules\u002Fserver-after-nonblocking.md",2012,"https:\u002F\u002Fgithub.com\u002FAb0umar\u002Fselrs.cc\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fvercel-react-best-practices\u002Frules\u002Fserver-after-nonblocking.md",{"path":369,"resourceType":96,"resourceTypeDesc":97,"sizeBytes":370,"sourceHtmlUrl":371},"rules\u002Fserver-auth-actions.md",2649,"https:\u002F\u002Fgithub.com\u002FAb0umar\u002Fselrs.cc\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fvercel-react-best-practices\u002Frules\u002Fserver-auth-actions.md",{"path":373,"resourceType":96,"resourceTypeDesc":97,"sizeBytes":374,"sourceHtmlUrl":375},"rules\u002Fserver-cache-lru.md",1353,"https:\u002F\u002Fgithub.com\u002FAb0umar\u002Fselrs.cc\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fvercel-react-best-practices\u002Frules\u002Fserver-cache-lru.md",{"path":377,"resourceType":96,"resourceTypeDesc":97,"sizeBytes":378,"sourceHtmlUrl":379},"rules\u002Fserver-cache-react.md",2228,"https:\u002F\u002Fgithub.com\u002FAb0umar\u002Fselrs.cc\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fvercel-react-best-practices\u002Frules\u002Fserver-cache-react.md",{"path":381,"resourceType":96,"resourceTypeDesc":97,"sizeBytes":382,"sourceHtmlUrl":383},"rules\u002Fserver-dedup-props.md",2060,"https:\u002F\u002Fgithub.com\u002FAb0umar\u002Fselrs.cc\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fvercel-react-best-practices\u002Frules\u002Fserver-dedup-props.md",{"path":385,"resourceType":96,"resourceTypeDesc":97,"sizeBytes":386,"sourceHtmlUrl":387},"rules\u002Fserver-hoist-static-io.md",4423,"https:\u002F\u002Fgithub.com\u002FAb0umar\u002Fselrs.cc\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fvercel-react-best-practices\u002Frules\u002Fserver-hoist-static-io.md",{"path":389,"resourceType":96,"resourceTypeDesc":97,"sizeBytes":390,"sourceHtmlUrl":391},"rules\u002Fserver-no-shared-module-state.md",1766,"https:\u002F\u002Fgithub.com\u002FAb0umar\u002Fselrs.cc\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fvercel-react-best-practices\u002Frules\u002Fserver-no-shared-module-state.md",{"path":393,"resourceType":96,"resourceTypeDesc":97,"sizeBytes":119,"sourceHtmlUrl":394},"rules\u002Fserver-parallel-fetching.md","https:\u002F\u002Fgithub.com\u002FAb0umar\u002Fselrs.cc\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fvercel-react-best-practices\u002Frules\u002Fserver-parallel-fetching.md",{"path":396,"resourceType":96,"resourceTypeDesc":97,"sizeBytes":397,"sourceHtmlUrl":398},"rules\u002Fserver-parallel-nested-fetching.md",992,"https:\u002F\u002Fgithub.com\u002FAb0umar\u002Fselrs.cc\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fvercel-react-best-practices\u002Frules\u002Fserver-parallel-nested-fetching.md",{"path":400,"resourceType":96,"resourceTypeDesc":97,"sizeBytes":401,"sourceHtmlUrl":402},"rules\u002Fserver-serialization.md",996,"https:\u002F\u002Fgithub.com\u002FAb0umar\u002Fselrs.cc\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Fvercel-react-best-practices\u002Frules\u002Fserver-serialization.md",{"path":404,"resourceType":405,"resourceTypeDesc":406,"sizeBytes":407,"sourceHtmlUrl":408},"scripts\u002Fagent.py","SCRIPT","脚本",6686,"https:\u002F\u002Fgithub.com\u002Fhenriquescastilho\u002Fmy-claude\u002Fblob\u002Fmain\u002F.claude\u002Fskills\u002Fauditing-aws-s3-bucket-permissions\u002Fscripts\u002Fagent.py",[410,449,458,467,488,514],{"skillNo":411,"name":412,"nameZh":6,"description":413,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":414,"licenseFileUrl":6,"sourceHtmlUrl":415,"categories":416,"keywords":429,"publishedAt":49},"01M6F0B6XPQ65AX2X0DWK8KT3E","markitdown","Convert files and office documents to Markdown. Supports PDF, DOCX, PPTX, XLSX, images (with OCR), audio (with transcription), HTML, CSV, JSON, XML, ZIP, YouTube URLs, EPubs and more.","MIT","https:\u002F\u002Fgithub.com\u002Fhenriquescastilho\u002Fmy-claude\u002Fblob\u002Fmain\u002F.codex\u002Fvendor_imports\u002Fclaude\u002Fmarketplaces\u002Fclaude-scientific-writer\u002Fskills\u002Fmarkitdown\u002FSKILL.md",[417,420,423,426],{"categoryNo":418,"categoryName":419,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000002","文档处理",{"categoryNo":421,"categoryName":422,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000003","演示文稿",{"categoryNo":424,"categoryName":425,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000004","电子表格",{"categoryNo":427,"categoryName":428,"taxonomyType":26,"taxonomyTypeDesc":27},"01JBSEEDCAT000000000000034","行政与办公人员",[412,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448],"docx","PDF","pptx","xlsx","documents","csv","ocr","Audio","Bash","markdown","convert","read","write","edit","html","images","files","youtube","with",{"skillNo":450,"name":412,"nameZh":6,"description":413,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":414,"licenseFileUrl":6,"sourceHtmlUrl":451,"categories":452,"keywords":457,"publishedAt":49},"01M6F06SBHR9F0SDWE282Y8075","https:\u002F\u002Fgithub.com\u002Fhenriquescastilho\u002Fmy-claude\u002Fblob\u002Fmain\u002F.codex\u002Fvendor_imports\u002Fclaude\u002Fmarketplaces\u002Fclaude-scientific-writer\u002Fscientific_writer\u002F.claude\u002Fskills\u002Fmarkitdown\u002FSKILL.md",[453,454,455,456],{"categoryNo":418,"categoryName":419,"taxonomyType":21,"taxonomyTypeDesc":22},{"categoryNo":421,"categoryName":422,"taxonomyType":21,"taxonomyTypeDesc":22},{"categoryNo":424,"categoryName":425,"taxonomyType":21,"taxonomyTypeDesc":22},{"categoryNo":427,"categoryName":428,"taxonomyType":26,"taxonomyTypeDesc":27},[412,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448],{"skillNo":459,"name":412,"nameZh":6,"description":413,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":414,"licenseFileUrl":6,"sourceHtmlUrl":460,"categories":461,"keywords":466,"publishedAt":49},"01M6F02D4R14EJAPBWVDF9J9VQ","https:\u002F\u002Fgithub.com\u002Fhenriquescastilho\u002Fmy-claude\u002Fblob\u002Fmain\u002F.codex\u002Fvendor_imports\u002Fclaude\u002Fmarketplaces\u002Fclaude-scientific-writer\u002F.claude\u002Fskills\u002Fmarkitdown\u002FSKILL.md",[462,463,464,465],{"categoryNo":418,"categoryName":419,"taxonomyType":21,"taxonomyTypeDesc":22},{"categoryNo":421,"categoryName":422,"taxonomyType":21,"taxonomyTypeDesc":22},{"categoryNo":424,"categoryName":425,"taxonomyType":21,"taxonomyTypeDesc":22},{"categoryNo":427,"categoryName":428,"taxonomyType":26,"taxonomyTypeDesc":27},[412,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448],{"skillNo":468,"name":469,"nameZh":6,"description":470,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":414,"licenseFileUrl":6,"sourceHtmlUrl":471,"categories":472,"keywords":473,"publishedAt":49},"01M6F000KS6YB4MKS774G4R8ND","zarr-python","Chunked N-D arrays for cloud storage. Compressed arrays, parallel I\u002FO, S3\u002FGCS integration, NumPy\u002FDask\u002FXarray compatible, for large-scale scientific computing pipelines.","https:\u002F\u002Fgithub.com\u002Fhenriquescastilho\u002Fmy-claude\u002Fblob\u002Fmain\u002F.codex\u002Fvendor_imports\u002Fclaude\u002Fmarketplaces\u002Fclaude-scientific-skills\u002Fscientific-skills\u002Fzarr-python\u002FSKILL.md",[],[474,475,476,477,31,478,479,480,481,482,483,484,485,486,487],"python","zarr python","storage","integration","gcs","cloud","dask","parallel","pipelines","arrays","numpy","scientific computing","scale","scientific",{"skillNo":489,"name":490,"nameZh":6,"description":491,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":414,"licenseFileUrl":6,"sourceHtmlUrl":492,"categories":493,"keywords":495,"publishedAt":49},"01M6EZZJWFXM1GR78KTW6J0DN8","what-if-oracle","Run structured What-If scenario analysis with multi-branch possibility exploration. Use this skill when the user asks speculative questions like \"what if...\", \"what would happen if...\", \"what are the possibilities\", \"explore scenarios\", \"scenario analysis\", \"possibility space\", \"what could go wrong\", \"best case \u002F worst case\", \"risk analysis\", \"contingency planning\", \"strategic options\", or any question about uncertain futures. Also trigger when the user faces a fork-in-the-road decision, wants to stress-test an idea, or needs to think through consequences before committing.","https:\u002F\u002Fgithub.com\u002Fhenriquescastilho\u002Fmy-claude\u002Fblob\u002Fmain\u002F.codex\u002Fvendor_imports\u002Fclaude\u002Fmarketplaces\u002Fclaude-scientific-skills\u002Fscientific-skills\u002Fwhat-if-oracle\u002FSKILL.md",[494],{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},[496,497,498,499,500,501,502,503,504,505,506,441,442,507,508,509,510,511,512,513],"oracle","what if oracle","go","run","ux","futures","analysis","explore","decision","branch","question","idea","exploration","options","stress-test","strategies","scenario","stress",{"skillNo":515,"name":516,"nameZh":6,"description":517,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":414,"licenseFileUrl":6,"sourceHtmlUrl":518,"categories":519,"keywords":530,"publishedAt":49},"01M6EZZCXAEB49RXGQCJX5E8GB","venue-templates","Access comprehensive LaTeX templates, formatting requirements, and submission guidelines for major scientific publication venues (Nature, Science, PLOS, IEEE, ACM), academic conferences (NeurIPS, ICML, CVPR, CHI), research posters, and grant proposals (NSF, NIH, DOE, DARPA). This skill should be used when preparing manuscripts for journal submission, conference papers, research posters, or grant proposals and need venue-specific formatting requirements and templates.","https:\u002F\u002Fgithub.com\u002Fhenriquescastilho\u002Fmy-claude\u002Fblob\u002Fmain\u002F.codex\u002Fvendor_imports\u002Fclaude\u002Fmarketplaces\u002Fclaude-scientific-skills\u002Fscientific-skills\u002Fvenue-templates\u002FSKILL.md",[520,523,526,527],{"categoryNo":521,"categoryName":522,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000018","写作与文案",{"categoryNo":524,"categoryName":525,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000021","资料检索与研究",{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},{"categoryNo":528,"categoryName":529,"taxonomyType":26,"taxonomyTypeDesc":27},"01JBSEEDCAT000000000000036","内容创作者",[531,532,533,534,535,536,537,538,438,38,441,442,443,539,540,541,542,543,487,544],"templates","venue templates","research","guidelines","NeurIPS","ICML","LaTeX","science","proposals","Academic","requirements","formatting","journal","chi"]