[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M6MSFPDYYWHNZYR3HG4TS07S":3,"skill-same:01M6MSFPDYYWHNZYR3HG4TS07S":71},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":15,"categories":16,"keywords":17,"publishedAt":38,"linkOnly":39,"markdownContent":40,"markdownBody":41,"frontMatter":42,"refName":43,"commitSha":44,"skillDirectory":45,"forksCount":46,"repositoryHtmlUrl":47,"repositoryHomepageUrl":6,"ownerHtmlUrl":48,"ownerBlogUrl":6,"ownerDescription":49,"updatedAt":50,"install":51,"resources":64},"01M6MSFPDYYWHNZYR3HG4TS07S","aws-security-scanner",null,"Scan AWS accounts for security misconfigurations and vulnerabilities. Use when user asks to audit AWS security, check for misconfigurations, find exposed S3 buckets, review IAM policies, check security groups, audit CloudTrail, or run AWS security checks. Covers S3, IAM, EC2, RDS, CloudTrail, and common CIS benchmarks.","Kernel8901\u002Fai-agent-skills-classification","Kernel8901","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F72647553?v=4","01M6KV388J2H5PNC8D8P940BJD","01M6KV38CS5B3AY63RKZB410YM",7,"MIT","https:\u002F\u002Fgithub.com\u002FKernel8901\u002Fai-agent-skills-classification\u002Fblob\u002Fmain\u002FDevOps与云计算\u002Faws-security-scanner\u002FSKILL.md",[],[18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37],"security scanner","aws security scanner","scanner","aws security","aws","security","cloudtrail","s3","iam","common","check","audit","use","cis","aws accounts","benchmarks","scan","rds","review","for","2026-11-10 10:12:30",false,"---\nname: aws-security-scanner\ndescription: Scan AWS accounts for security misconfigurations and vulnerabilities. Use when user asks to audit AWS security, check for misconfigurations, find exposed S3 buckets, review IAM policies, check security groups, audit CloudTrail, or run AWS security checks. Covers S3, IAM, EC2, RDS, CloudTrail, and common CIS benchmarks.\n---\n\n# AWS Security Scanner\n\nAudit AWS infrastructure for security issues using AWS CLI.\n\n## Prerequisites\n\n- AWS CLI configured (`aws configure` or IAM role)\n- Read permissions for resources being scanned\n\n## Quick Scans\n\n### S3 Bucket Security\n```bash\n# Find public buckets\naws s3api list-buckets --query 'Buckets[].Name' --output text | tr '\\t' '\\n' | while read bucket; do\n  acl=$(aws s3api get-bucket-acl --bucket \"$bucket\" 2>\u002Fdev\u002Fnull)\n  policy=$(aws s3api get-bucket-policy --bucket \"$bucket\" 2>\u002Fdev\u002Fnull)\n  public_access=$(aws s3api get-public-access-block --bucket \"$bucket\" 2>\u002Fdev\u002Fnull)\n  echo \"=== $bucket ===\"\n  echo \"$acl\" | grep -q \"AllUsers\\|AuthenticatedUsers\" && echo \"⚠️ PUBLIC ACL\"\n  echo \"$policy\" | grep -q '\"Principal\":\"\\*\"' && echo \"⚠️ PUBLIC POLICY\"\n  echo \"$public_access\" | grep -q \"false\" && echo \"⚠️ Public access not fully blocked\"\ndone\n```\n\n### IAM Security Issues\n```bash\n# Users without MFA\naws iam generate-credential-report && sleep 5\naws iam get-credential-report --query 'Content' --output text | base64 -d | grep -E \"^[^,]+,.*,false\" | cut -d',' -f1\n\n# Overly permissive policies (Admin access)\naws iam list-policies --scope Local --query 'Policies[].Arn' --output text | tr '\\t' '\\n' | while read arn; do\n  version=$(aws iam get-policy --policy-arn \"$arn\" --query 'Policy.DefaultVersionId' --output text)\n  aws iam get-policy-version --policy-arn \"$arn\" --version-id \"$version\" --query 'PolicyVersion.Document' | grep -q '\"Action\":\"\\*\".*\"Resource\":\"\\*\"' && echo \"⚠️ Admin policy: $arn\"\ndone\n\n# Access keys older than 90 days\naws iam list-users --query 'Users[].UserName' --output text | tr '\\t' '\\n' | while read user; do\n  aws iam list-access-keys --user-name \"$user\" --query \"AccessKeyMetadata[?CreateDate\u003C='$(date -d '-90 days' +%Y-%m-%d)'].{User:UserName,KeyId:AccessKeyId,Created:CreateDate}\" --output table\ndone\n```\n\n### Security Groups\n```bash\n# Open to world (0.0.0.0\u002F0)\naws ec2 describe-security-groups --query 'SecurityGroups[?IpPermissions[?IpRanges[?CidrIp==`0.0.0.0\u002F0`]]].{ID:GroupId,Name:GroupName,VPC:VpcId}' --output table\n\n# SSH open to world\naws ec2 describe-security-groups --filters \"Name=ip-permission.from-port,Values=22\" \"Name=ip-permission.cidr,Values=0.0.0.0\u002F0\" --query 'SecurityGroups[].{ID:GroupId,Name:GroupName}' --output table\n\n# RDP open to world  \naws ec2 describe-security-groups --filters \"Name=ip-permission.from-port,Values=3389\" \"Name=ip-permission.cidr,Values=0.0.0.0\u002F0\" --query 'SecurityGroups[].{ID:GroupId,Name:GroupName}' --output table\n```\n\n### CloudTrail Status\n```bash\n# Check if CloudTrail is enabled in all regions\naws cloudtrail describe-trails --query 'trailList[].{Name:Name,IsMultiRegion:IsMultiRegionTrail,LogValidation:LogFileValidationEnabled,S3Bucket:S3BucketName}' --output table\n\n# Check for trails without log validation\naws cloudtrail describe-trails --query 'trailList[?LogFileValidationEnabled==`false`].Name' --output text\n```\n\n### RDS Security\n```bash\n# Publicly accessible RDS instances\naws rds describe-db-instances --query 'DBInstances[?PubliclyAccessible==`true`].{ID:DBInstanceIdentifier,Engine:Engine,Endpoint:Endpoint.Address}' --output table\n\n# Unencrypted RDS instances\naws rds describe-db-instances --query 'DBInstances[?StorageEncrypted==`false`].{ID:DBInstanceIdentifier,Engine:Engine}' --output table\n```\n\n### EBS Encryption\n```bash\n# Unencrypted EBS volumes\naws ec2 describe-volumes --query 'Volumes[?Encrypted==`false`].{ID:VolumeId,Size:Size,State:State}' --output table\n```\n\n## Full Audit Report\n\nRun comprehensive scan and output markdown report:\n\n```bash\necho \"# AWS Security Audit Report\"\necho \"Generated: $(date)\"\necho \"\"\necho \"## S3 Buckets\"\n# ... run S3 checks\necho \"\"\necho \"## IAM\"  \n# ... run IAM checks\necho \"\"\necho \"## Security Groups\"\n# ... run SG checks\n# etc.\n```\n\n## Severity Levels\n\n| Issue | Severity | \n|-------|----------|\n| S3 bucket public | ? Critical |\n| SSH\u002FRDP open to world | ? Critical |\n| IAM user without MFA | ? High |\n| Admin policy attached | ? High |\n| CloudTrail disabled | ? High |\n| RDS publicly accessible | ? High |\n| Unencrypted EBS\u002FRDS | ? Medium |\n| Access keys > 90 days | ? Medium |\n\n## CIS Benchmark Checks\n\nFor comprehensive CIS AWS Foundations Benchmark compliance, check:\n- 1.1: Avoid root account usage\n- 1.2: MFA on root\n- 1.3: Disable unused credentials\n- 2.1: CloudTrail enabled\n- 2.2: Log file validation\n- 4.1: No security groups allow 0.0.0.0\u002F0 to port 22\n- 4.2: No security groups allow 0.0.0.0\u002F0 to port 3389\n\n## Automation\n\nFor scheduled scans, use AWS Config Rules or set up cron:\n```bash\n0 6 * * * \u002Fpath\u002Fto\u002Faws-security-scan.sh | mail -s \"Daily AWS Audit\" security@company.com\n```\n","# AWS Security Scanner\n\nAudit AWS infrastructure for security issues using AWS CLI.\n\n## Prerequisites\n\n- AWS CLI configured (`aws configure` or IAM role)\n- Read permissions for resources being scanned\n\n## Quick Scans\n\n### S3 Bucket Security\n```bash\n# Find public buckets\naws s3api list-buckets --query 'Buckets[].Name' --output text | tr '\\t' '\\n' | while read bucket; do\n  acl=$(aws s3api get-bucket-acl --bucket \"$bucket\" 2>\u002Fdev\u002Fnull)\n  policy=$(aws s3api get-bucket-policy --bucket \"$bucket\" 2>\u002Fdev\u002Fnull)\n  public_access=$(aws s3api get-public-access-block --bucket \"$bucket\" 2>\u002Fdev\u002Fnull)\n  echo \"=== $bucket ===\"\n  echo \"$acl\" | grep -q \"AllUsers\\|AuthenticatedUsers\" && echo \"⚠️ PUBLIC ACL\"\n  echo \"$policy\" | grep -q '\"Principal\":\"\\*\"' && echo \"⚠️ PUBLIC POLICY\"\n  echo \"$public_access\" | grep -q \"false\" && echo \"⚠️ Public access not fully blocked\"\ndone\n```\n\n### IAM Security Issues\n```bash\n# Users without MFA\naws iam generate-credential-report && sleep 5\naws iam get-credential-report --query 'Content' --output text | base64 -d | grep -E \"^[^,]+,.*,false\" | cut -d',' -f1\n\n# Overly permissive policies (Admin access)\naws iam list-policies --scope Local --query 'Policies[].Arn' --output text | tr '\\t' '\\n' | while read arn; do\n  version=$(aws iam get-policy --policy-arn \"$arn\" --query 'Policy.DefaultVersionId' --output text)\n  aws iam get-policy-version --policy-arn \"$arn\" --version-id \"$version\" --query 'PolicyVersion.Document' | grep -q '\"Action\":\"\\*\".*\"Resource\":\"\\*\"' && echo \"⚠️ Admin policy: $arn\"\ndone\n\n# Access keys older than 90 days\naws iam list-users --query 'Users[].UserName' --output text | tr '\\t' '\\n' | while read user; do\n  aws iam list-access-keys --user-name \"$user\" --query \"AccessKeyMetadata[?CreateDate\u003C='$(date -d '-90 days' +%Y-%m-%d)'].{User:UserName,KeyId:AccessKeyId,Created:CreateDate}\" --output table\ndone\n```\n\n### Security Groups\n```bash\n# Open to world (0.0.0.0\u002F0)\naws ec2 describe-security-groups --query 'SecurityGroups[?IpPermissions[?IpRanges[?CidrIp==`0.0.0.0\u002F0`]]].{ID:GroupId,Name:GroupName,VPC:VpcId}' --output table\n\n# SSH open to world\naws ec2 describe-security-groups --filters \"Name=ip-permission.from-port,Values=22\" \"Name=ip-permission.cidr,Values=0.0.0.0\u002F0\" --query 'SecurityGroups[].{ID:GroupId,Name:GroupName}' --output table\n\n# RDP open to world  \naws ec2 describe-security-groups --filters \"Name=ip-permission.from-port,Values=3389\" \"Name=ip-permission.cidr,Values=0.0.0.0\u002F0\" --query 'SecurityGroups[].{ID:GroupId,Name:GroupName}' --output table\n```\n\n### CloudTrail Status\n```bash\n# Check if CloudTrail is enabled in all regions\naws cloudtrail describe-trails --query 'trailList[].{Name:Name,IsMultiRegion:IsMultiRegionTrail,LogValidation:LogFileValidationEnabled,S3Bucket:S3BucketName}' --output table\n\n# Check for trails without log validation\naws cloudtrail describe-trails --query 'trailList[?LogFileValidationEnabled==`false`].Name' --output text\n```\n\n### RDS Security\n```bash\n# Publicly accessible RDS instances\naws rds describe-db-instances --query 'DBInstances[?PubliclyAccessible==`true`].{ID:DBInstanceIdentifier,Engine:Engine,Endpoint:Endpoint.Address}' --output table\n\n# Unencrypted RDS instances\naws rds describe-db-instances --query 'DBInstances[?StorageEncrypted==`false`].{ID:DBInstanceIdentifier,Engine:Engine}' --output table\n```\n\n### EBS Encryption\n```bash\n# Unencrypted EBS volumes\naws ec2 describe-volumes --query 'Volumes[?Encrypted==`false`].{ID:VolumeId,Size:Size,State:State}' --output table\n```\n\n## Full Audit Report\n\nRun comprehensive scan and output markdown report:\n\n```bash\necho \"# AWS Security Audit Report\"\necho \"Generated: $(date)\"\necho \"\"\necho \"## S3 Buckets\"\n# ... run S3 checks\necho \"\"\necho \"## IAM\"  \n# ... run IAM checks\necho \"\"\necho \"## Security Groups\"\n# ... run SG checks\n# etc.\n```\n\n## Severity Levels\n\n| Issue | Severity | \n|-------|----------|\n| S3 bucket public | ? Critical |\n| SSH\u002FRDP open to world | ? Critical |\n| IAM user without MFA | ? High |\n| Admin policy attached | ? High |\n| CloudTrail disabled | ? High |\n| RDS publicly accessible | ? High |\n| Unencrypted EBS\u002FRDS | ? Medium |\n| Access keys > 90 days | ? Medium |\n\n## CIS Benchmark Checks\n\nFor comprehensive CIS AWS Foundations Benchmark compliance, check:\n- 1.1: Avoid root account usage\n- 1.2: MFA on root\n- 1.3: Disable unused credentials\n- 2.1: CloudTrail enabled\n- 2.2: Log file validation\n- 4.1: No security groups allow 0.0.0.0\u002F0 to port 22\n- 4.2: No security groups allow 0.0.0.0\u002F0 to port 3389\n\n## Automation\n\nFor scheduled scans, use AWS Config Rules or set up cron:\n```bash\n0 6 * * * \u002Fpath\u002Fto\u002Faws-security-scan.sh | mail -s \"Daily AWS Audit\" security@company.com\n```\n",{"name":5,"description":7},"main","f4cb2d49f7667e79ef7804f50396d5aaffdf1f56","DevOps与云计算\u002Faws-security-scanner",1,"https:\u002F\u002Fgithub.com\u002FKernel8901\u002Fai-agent-skills-classification","https:\u002F\u002Fgithub.com\u002FKernel8901","a little little little dobe in life but science geek","2026-04-05 16:43:56",{"source":8,"skillName":5,"commands":52,"prompt":62,"zipAvailable":63},[53,56,59],{"tool":54,"command":55},"npx","npx skills add Kernel8901\u002Fai-agent-skills-classification --skill aws-security-scanner",{"tool":57,"command":58},"bunx","bunx skills add Kernel8901\u002Fai-agent-skills-classification --skill aws-security-scanner",{"tool":60,"command":61},"pnpm","pnpm dlx skills add Kernel8901\u002Fai-agent-skills-classification --skill aws-security-scanner","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002FKernel8901\u002Fai-agent-skills-classification\u002Fblob\u002Fmain\u002FDevOps与云计算\u002Faws-security-scanner\u002FSKILL.md",true,[65],{"path":66,"resourceType":67,"resourceTypeDesc":68,"sizeBytes":69,"sourceHtmlUrl":70},"_meta.json","REFERENCE","参考文档",298,"https:\u002F\u002Fgithub.com\u002FKernel8901\u002Fai-agent-skills-classification\u002Fblob\u002Fmain\u002FDevOps与云计算\u002Faws-security-scanner\u002F_meta.json",[72,95,131,142,152,181],{"skillNo":73,"name":74,"nameZh":6,"description":75,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":76,"categories":77,"keywords":78,"publishedAt":38},"01M6Q5R6WZ06RRB9RQTW54B34B","zyfai","Earn yield on any Ethereum wallet on Base, Arbitrum, and Plasma. Use when a user wants passive DeFi yield on their funds. Deploys a non-custodial subaccount (Safe) linked to their EOA, enables automated yield optimization, and lets them deposit\u002Fwithdraw anytime.","https:\u002F\u002Fgithub.com\u002FKernel8901\u002Fai-agent-skills-classification\u002Fblob\u002Fmain\u002F金融\u002Fzyfai-sdk\u002FSKILL.md",[],[74,79,80,81,82,83,30,84,85,86,87,88,89,90,91,92,93,94],"safe","ethereum","defi","Optimization","user","Wallet","base","deposit","withdraw","yield","arbitrum","non-custodial","passive","defi yield","earn","yield optimization",{"skillNo":96,"name":97,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":98,"categories":99,"keywords":113,"publishedAt":38},"01M6Q5R337B5JSNER4P4YS03TN","zerion-api","https:\u002F\u002Fgithub.com\u002FKernel8901\u002Fai-agent-skills-classification\u002Fblob\u002Fmain\u002F金融\u002Fzerion-api\u002FSKILL.md",[100,105,108],{"categoryNo":101,"categoryName":102,"taxonomyType":103,"taxonomyTypeDesc":104},"01JBSEEDCAT000000000000010","后端与接口","SCENARIO","使用场景",{"categoryNo":106,"categoryName":107,"taxonomyType":103,"taxonomyTypeDesc":104},"01JBSEEDCAT000000000000023","Skill与智能体开发",{"categoryNo":109,"categoryName":110,"taxonomyType":111,"taxonomyTypeDesc":112},"01JBSEEDCAT000000000000030","开发工程师","PROFESSION","适用职业",[114,115,116,117,118,119,120,81,121,84,122,123,124,125,126,127,128,129,130],"api","zerion api","zerion","MCP","mcp server","server","blockchain","transactions","crypto wallet","crypto","evm","solana","query","across","positions","token","prices",{"skillNo":132,"name":133,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":134,"categories":135,"keywords":139,"publishedAt":38},"01M6Q5QZFYTDAZMZ27BN5VZXAR","zerion-api-skill","https:\u002F\u002Fgithub.com\u002FKernel8901\u002Fai-agent-skills-classification\u002Fblob\u002Fmain\u002F金融\u002Fzerion-api-skill\u002FSKILL.md",[136,137,138],{"categoryNo":101,"categoryName":102,"taxonomyType":103,"taxonomyTypeDesc":104},{"categoryNo":106,"categoryName":107,"taxonomyType":103,"taxonomyTypeDesc":104},{"categoryNo":109,"categoryName":110,"taxonomyType":111,"taxonomyTypeDesc":112},[114,140,141,115,116,117,118,119,120,81,121,84,123,124,125,126,127,128,129,130],"api skill","zerion api skill",{"skillNo":143,"name":144,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":145,"categories":146,"keywords":150,"publishedAt":38},"01M6Q5QW17QW98RA3FE45E4RD8","zerion-api-mcp","https:\u002F\u002Fgithub.com\u002FKernel8901\u002Fai-agent-skills-classification\u002Fblob\u002Fmain\u002F金融\u002Fzerion-api-mcp\u002FSKILL.md",[147,148,149],{"categoryNo":101,"categoryName":102,"taxonomyType":103,"taxonomyTypeDesc":104},{"categoryNo":106,"categoryName":107,"taxonomyType":103,"taxonomyTypeDesc":104},{"categoryNo":109,"categoryName":110,"taxonomyType":111,"taxonomyTypeDesc":112},[117,114,151,115,116,118,119,81,121,84,122,123,124,125,126,127,128,129,130],"zerion api mcp",{"skillNo":153,"name":154,"nameZh":6,"description":155,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":156,"categories":157,"keywords":161,"publishedAt":38},"01M6Q5QQYZB7A501BDEQWKGSJT","yahoo-finance-forex","Fetches real-time FOREX news and market data from Yahoo Finance for major currency pairs (EUR\u002FUSD, GBP\u002FUSD, USD\u002FJPY, etc.). Analyzes sentiment and provides trading context.","https:\u002F\u002Fgithub.com\u002FKernel8901\u002Fai-agent-skills-classification\u002Fblob\u002Fmain\u002F金融\u002Fyahoo-finance-forex\u002FSKILL.md",[158],{"categoryNo":159,"categoryName":160,"taxonomyType":111,"taxonomyTypeDesc":112},"01JBSEEDCAT000000000000040","财务",[162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,37],"finance","yahoo finance","forex","yahoo","yahoo finance forex","github","https","sentiment","real-time","python3","install","Market","usd","news","time","currency","gbp","pip","market data",{"skillNo":182,"name":183,"nameZh":6,"description":184,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":185,"categories":186,"keywords":188,"publishedAt":38},"01M6Q5QM6VS84WZVM7BKXXPF32","yahoo-finance","This skill should be used when the user asks to \"get stock prices\", \"check stock quotes\", \"look up earnings\", \"get financial data\", \"find trending stocks\", or needs stock market data from Yahoo Finance.","https:\u002F\u002Fgithub.com\u002FKernel8901\u002Fai-agent-skills-classification\u002Fblob\u002Fmain\u002F金融\u002Fyahoo-finance-cli\u002FSKILL.md",[187],{"categoryNo":159,"categoryName":160,"taxonomyType":111,"taxonomyTypeDesc":112},[162,163,165,189,190,191,28,192,193,173,194,195,196,197,198,199,200,201,130,180],"cli","homebrew","find","brew","up","local","get","stock","link","trending","sf","quotes","ln"]