A comprehensive security auditing tool for AWS infrastructure that identifies misconfigurations and vulnerabilities across S3, IAM, EC2, and RDS.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install aws-security-scanner
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install aws-security-scanner using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is AWS Security Scanner?
The AWS Security Scanner is a robust auditing tool designed to harden cloud environments by identifying common security pitfalls and misconfigurations. As a key utility within the Openclaw Skills library, it automates the discovery of public S3 buckets, overly permissive IAM policies, and exposed network perimeters that could lead to data breaches.
This skill maps findings to industry standards, such as the CIS AWS Foundations Benchmark, providing developers and security engineers with actionable intelligence. By integrating this into your workflow, you ensure that encryption is enforced across EBS and RDS volumes while maintaining strict identity management and network security protocols.
AWS Security Scanner Use Cases
- Auditing S3 buckets for unauthorized public access via ACLs or bucket policies.
- Identifying IAM users who do not have Multi-Factor Authentication (MFA) enabled.
- Detecting security groups that allow unrestricted SSH or RDP access from the public internet.
- Scanning for unencrypted RDS databases and EBS volumes to ensure data-at-rest protection.
- Generating comprehensive markdown-formatted security audit reports for compliance documentation.
How AWS Security Scanner Works
- The skill connects to the target environment using pre-configured AWS CLI credentials or IAM roles.
- It executes optimized AWS CLI queries across multiple services, including S3, IAM, EC2, RDS, and CloudTrail.
- Collected metadata is analyzed against security best practices and CIS benchmarks to detect vulnerabilities.
- Vulnerabilities are categorized by severity levels, ranging from Medium to Critical.
- The skill outputs formatted tables or a complete Markdown report for immediate remediation and tracking.
AWS Security Scanner Setup
To use this tool within the Openclaw Skills ecosystem, ensure the AWS CLI is installed and configured with sufficient read permissions for the resources you intend to scan.
# Configure your AWS credentials
aws configure
# Verify identity and permissions
aws sts get-caller-identity
AWS Security Scanner Data Schema & Taxonomy
The skill organizes its findings using a structured taxonomy to simplify remediation:
| Attribute | Description |
|---|---|
| Resource ID | The unique identifier (ARN or Name) of the affected AWS resource. |
| Issue Category | The service area (e.g., S3, IAM, Security Groups). |
| Severity | The risk level: Critical, High, Medium, or Low. |
| Status | The specific security state found (e.g., Publicly Accessible, No MFA). |
| Remediation | Guidance on how to resolve the identified misconfiguration. |
AWS Security Scanner Advanced Features
- Automated CIS AWS Foundations Benchmark compliance auditing.
- Multi-region CloudTrail status verification and log validation checks.
- Scriptable reporting for integration into CI/CD pipelines or scheduled cron jobs.
- Customizable severity scoring for different organizational security requirements.
- Seamless integration with other Openclaw Skills for automated cloud management.
SKILL.md
Loading
Related Openclaw Skills
OpenClaw Shield Quick Scan
A high-speed security scanning skill designed to identify credential theft, data exfiltration, and suspicious command execution within codebases.
OpenClaw Policy Check
A lightweight security scanner designed to detect high-risk patterns and policy violations in code and scripts before execution.
VPS Agent Migration
A technical workflow for migrating local OpenClaw sub-agents to a remote VPS environment while maintaining configuration integrity and service continuity.
Obsidian Attachment Cleaner
A specialized automation tool to automatically organize loose files and images in your Obsidian vault root into a dedicated attachments directory.
CrabNet
CrabNet is a cross-agent collaboration protocol and registry API designed for discovery, capability registration, and task exchange between autonomous agents.
Skill Vetter
A security-first vetting protocol designed to audit AI agent skills for malicious patterns and permission overreach before installation.
Featured*
