aws-security-scanner
AWS security configuration scanning and hardening using Prowler, Security Hub, and AWS Config
npx skills add a5c-ai/babysitter --skill aws-security-scanner --agent claude-code
Same command for any agent — swap --agent for codex, cursor, copilot.
Weekly change comes from our own snapshots, not the repository page — it measures attention, not adoption.
# AWS Security Scanner Skill ## Purpose Automated AWS security configuration scanning and hardening to identify misconfigurations, compliance violations, and security risks across AWS accounts and organizations. ## Capabilities ### Prowler Security Assessments - Run comprehensive Prowler security scans - Execute CIS AWS Foundations Benchmark checks - Run AWS Well-Architected security pillar assessments - Check PCI DSS, HIPAA, GDPR compliance - Generate multi-format reports (HTML, CSV, JSON) ### IAM Security Analysis - Analyze IAM policies for over-permissive access - Check for unused credentials and access keys - Identify IAM users without MFA - Review cross-account access configurations - Detect privilege escalation paths - Analyze service control policies (SCPs) ### S3 Bucket Security - Identify publicly accessible buckets - Check bucket encryption configurations - Review bucket policies and ACLs - Verify access logging enabled - Check for sensitive data exposure - Validate versioning and replication ### Network Security Analysis - Review security group configurations - Analyze Network ACLs - Check VPC flow log enablement - Identify public-facing resources - Validate VPC endpoint
- Purpose
- Capabilities
- Prowler Security Assessments
- IAM Security Analysis
- S3 Bucket Security
- Network Security Analysis
- Encryption Verification
- Logging and Monitoring
- Compliance Mapping
- AWS Services Covered
- Integrations
- Target Processes
- Input Schema
- Output Schema
What does the aws-security-scanner skill do?
AWS security configuration scanning and hardening using Prowler, Security Hub, and AWS Config
How do I install it?
Run `npx skills add a5c-ai/babysitter --skill aws-security-scanner --agent claude-code` — it drops the skill into your project so the agent can pick it up. Swap the --agent value for codex, cursor or copilot if you use one of those.
Where does this skill come from?
From a5c-ai/babysitter, a repository with 1,642 stars. We read it straight from the repository tree rather than a submitted listing, so what you see here is what is actually published.
Is a popular skill a good skill?
Not necessarily. Stars measure attention, not adoption — a repository can trend for a week and be abandoned. That is why we show the weekly change from our own snapshots next to the total, instead of a single flattering number.