Iam Policy Auditor
by anyshift-io · development · python, rust, bash, aws, skill
Audit an AWS IAM policy document (or the set of policies attached to one principal) for over-broad grants and privilege-escalation paths that no single statement looks guilty of. Expands wildcard Actions to the concrete security-relevant permissions they grant, flags the near-admin shapes a checklist waves through (Action '*' on Resource '*', Allow + NotAction, service-level wildcards), and evaluates the union of all statements against the known privilege-escalation combinations (iam:PassRole...
Source: https://github.com/anyshift-io/sre-skills
Install
git clone https://github.com/anyshift-io/sre-skillsTags: python, rust, bash, aws, skill
⭐ 13 GitHub stars · Source: skillsdirectory
About development MCP servers and Claude skills
development MCP servers extend what AI agents can do inside Claude Code, Cursor, Copilot, Codex, and Windsurf. The Skiln directory indexes 16,000+ such integrations across 22 categories.
Iam Policy Auditor is one of hundreds of development entries indexed on Skiln. Browse the full development category or the complete directory of Claude skills, MCP servers, agents, commands, and hooks.
Related development MCPs and skills
- Kubectl Investigator by anyshift-io
Investigate a live or recent incident in a Kubernetes cluster. Anchor the window, bisect the change surface (rollouts, ConfigMaps/Secrets, RBAC, HPA/cluster changes, CronJobs), classify against four reference failure paths (OOM, DNS, cascading-failure, deploy-correlator), confirm the hypothesis with three independent signals, quantify blast radius, and propose mitigation before root cause. Use whenever an agent is asked "what is breaking in the cluster right now", "why did this pod/Deployment...
- Sqs Queue Auditor by anyshift-io
Audit a single AWS SQS queue's configuration for the misconfigurations that silently drop or re-deliver messages while every attribute reads as fine. Parses the GetQueueAttributes output (and the referenced dead-letter queue), checks the redrive path (DLQ present, maxReceiveCount band, DLQ-vs-source retention ordering), the message lifecycle (poison messages aging out before they reach the DLQ, default visibility timeout, short retention), and exposure (open resource policy, encryption at res...
- Backtest Datetime Visualization by majiayu000
Converting backtest visualizations from bar indices/timesteps to actual datetime axes for clearer time context
- Baoyu Slide Deck by majiayu000
Generate professional slide deck images from content. Creates comprehensive outlines with style instructions, then generates individual slide images. Use when user asks to "create slides", "make a presentation", "generate deck", or "slide deck".
- Malware Analyst by benjaminasterA
Expert malware analyst specializing in defensive malware research,
- Brain Ask by hamza-ali-shahjahan
Query Hamzaish's brain — search across learnings, decisions, playbooks, product docs, and configs. Returns ranked citations with snippets.
- Seo Aeo Bootstrap by hamza-ali-shahjahan
Ship the SEO + AEO foundation (Google/Bing/Yandex + ChatGPT/Claude/Perplexity) into a Hamzaish product. Adds llms.txt, AI-bot-friendly robots.txt, FAQPage/SoftwareApplication JSON-LD, sitemap, and the meta head block.
- actual by actual-software
Feature-complete companion for the actual CLI, an ADR-powered CLAUDE.md/AGENTS.md generator. Runs and troubleshoots actual adr-bot, status, auth, config, runners, and models, and drives the Actual Advisor (login, advisor, whoami, logout) for org-scoped architecture questions. Covers all 5 runners (claude-cli, anthropic-api, openai-api, codex-cli, cursor-cli), all model patterns, all 3 output formats (claude-md, agents-md, cursor-rules), and all error types. Use when working with the actual CL...
Frequently asked questions
How do I install Iam Policy Auditor?
Add the install command above to your Claude Code, Cursor, or Windsurf MCP configuration. Most servers register via npx, a local command, or a Docker image. Refer to the source repository for environment variables and credential requirements.
Which clients support Iam Policy Auditor?
Any MCP-compatible client works: Claude Desktop, Claude Code CLI, Cursor, Windsurf, Zed, and VS Code with the official MCP extension. OpenAI Codex and GitHub Copilot increasingly support MCP via adapter bridges.
Is Iam Policy Auditor free?
The server itself is typically open source. Any upstream service (API keys, paid tiers, hosted infrastructure) may have its own pricing. Check the source repository for details.