security-group-review

仓库创建 2026年7月26日最近提交 3 天前SkillHot 收录 2 天前

这个 Skill 做什么

检查云端的 security groups / 防火墙规则，找出像把数据库、SSH、RDP 对外开到 0.0.0.0/0 这样的危险配置并收紧到最小权限。做云态势评估或基础设施变更后要用，目标是把暴露面降到最小。关键在于识别常见错误并按最小权限原则修复，防止被自动化扫描器发现。

▸ 展开 SKILL.md 英文原文

Use when auditing cloud network exposure — finding security groups and firewall rules that open sensitive ports to the world, and tightening them to least access.

Stars

Forks

仓库内 Skill

7 日增星

安装 / 使用

给你的 Agent 一句话（通用）

帮我安装这个 skill：https://raw.githubusercontent.com/jihedbfr-art/cyber-skills/main/skills/06-cloud-security/04-security-group-review/SKILL.md

或 curl 直取 SKILL.md

curl -fsSL "https://raw.githubusercontent.com/jihedbfr-art/cyber-skills/main/skills/06-cloud-security/04-security-group-review/SKILL.md"

SKILL.MD 节选查看完整文件 ↗

## Purpose

Security groups are the cloud's host firewall, and the classic mistake is a rule opening a sensitive port to `0.0.0.0/0` — a database, SSH, or RDP exposed to the entire internet. Attackers scan for exactly these. This skill covers auditing security-group rules for dangerous exposure and closing them to least access.

## When to use it

Cloud posture reviews, after infrastructure changes, and continuously (exposure creeps in with every quick "just open it to test" rule). Pairs with the network port-scanning skill — this is the cloud-native way to see exposure from the config side.

## Procedure

1. **Pull the rules and look for the world-open ones.** The dangerous pattern is a sou

via SKILL·HOT · 数据来自 GitHub 公开信息 · 原文版权归作者所有