From cybersec-toolkit
Audits Azure Blob and ADLS storage accounts for public access exposure, weak or long-lived SAS tokens, missing encryption at rest, disabled HTTPS-only traffic, and outdated TLS versions using azure-mgmt-storage Python SDK. Useful for cloud security audits and incident investigations.
How this skill is triggered — by the user, by Claude, or both
Slash command
/cybersec-toolkit:detecting-azure-storage-account-misconfigurationsThe summary Claude sees in its skill listing — used to decide when to auto-load this skill
Azure Storage accounts are a frequent target for attackers due to misconfigured public access, long-lived SAS tokens, missing encryption, and outdated TLS versions. This skill uses the azure-mgmt-storage Python SDK with StorageManagementClient to enumerate all storage accounts in a subscription, inspect their security properties, list blob containers for public access settings, and generate a r...
Azure Storage accounts are a frequent target for attackers due to misconfigured public access, long-lived SAS tokens, missing encryption, and outdated TLS versions. This skill uses the azure-mgmt-storage Python SDK with StorageManagementClient to enumerate all storage accounts in a subscription, inspect their security properties, list blob containers for public access settings, and generate a risk-scored audit report identifying critical misconfigurations.
azure-mgmt-storage, azure-identityallow_blob_public_access enabled on storage account or individual containers set to Blob/Container access levelenable_https_traffic_only disabled, allowing unencrypted HTTP trafficJSON report with per-account findings, severity ratings (Critical/High/Medium/Low), and remediation recommendations aligned with CIS Azure Benchmark controls.
npx claudepluginhub 26zl/cybersec-toolkit --plugin cybersec-toolkitAudits Azure Blob and ADLS storage accounts for public access exposure, weak or long-lived SAS tokens, missing encryption at rest, disabled HTTPS-only traffic, and outdated TLS versions using azure-mgmt-storage Python SDK. Useful for cloud security audits and incident investigations.
Audits Azure Storage accounts for public access, weak SAS tokens, missing encryption, disabled HTTPS, and outdated TLS using azure-mgmt-storage SDK.
Audits Azure Storage accounts for misconfigurations: public blob access, missing encryption, permissive SAS tokens, disabled logging, and network violations using Azure CLI, PowerShell, and Defender for Storage.