Axguard Cloud — Development skill for Claude Code
Cloud and CORS misconfig — metadata URLs, wildcard origins.
How to install Axguard Cloud
Installs to ~/.claude/skills/awarexone-axguard-axguard-cloud/SKILL.md
mkdir -p ~/.claude/skills/awarexone-axguard-axguard-cloud && curl -fsSL https://raw.githubusercontent.com/Awarexone/AXguard/HEAD/commands/axguard-cloud.md -o ~/.claude/skills/awarexone-axguard-axguard-cloud/SKILL.md Restart Claude Code, or start a new session, for it to be picked up.
What Axguard Cloud does
description: Cloud and CORS misconfig — metadata URLs, wildcard origins. Usage: /axguard-cloud [path]
/axguard-cloud
**Specialist:** Cloud Reviewer
Usage
/axguard-cloud
Focus
- Metadata IP usage in app code
Access-Control-Allow-Origin: *with credentialed APIs- Overly broad IAM / public buckets (manual when IaC present)
Steps
- Scan → keep
cloud.*. - Inspect IaC / CI for public storage and wildcard principals when those files exist.
- Report concrete
Alternatives in Development
- Claude SEO — Multi-Platform Agent Instructions — For Cursor, Cursor Cloud Agents, Google Antigravity, and Gemini CLI 5k ★
- CORS — Scan an endpoint for CORS misconfiguration — arbitrary-origin reflection, null-origin trust, credential exposu 4.5k ★
- Apify Collect — Collect job-posting URLs into ~/.dear-hiring-manager/urls.txt by running your Apify job scraper, for /batch 107 ★
Full documentation available on GitHub
View Source RepositoryRelated Skills
Axguard GraphQL
GraphQL misconfig — introspection enabled, CSRF prevention off. Usage: /axguard-graphql [path]
Axguard Auth
AuthZ / IDOR / JWT / CSRF footgun hunt. Usage: /axguard-auth [path]
Malware Sandbox MCP
Detonate files & URLs in cloud malware sandboxes (Hybrid Analysis, tria.ge, ANY.RUN) and enrich IOCs across Ma
Lovable Cloud To Supabase Migration
Migrate from Lovable Cloud to your own Supabase. Official export path, 33 steps, every trap documented. Claude
Contribution Fleet
Launch N opensource-contributor runs in parallel across different repos. Each run gets its own state directory
Fan Plan
/fan-plan advisory bridge — parse a PLAN's P?[path] ACs and PROPOSE a read-only fan-out. ADVISORY ONLY; the Ow
Related Agents
Context
Gathers all context needed to onboard a dataset to Data Basis — raw source URLs, documentation, organization,
Worker Source Fetcher
Fetches URLs or processes pasted content, applies privacy filter, saves to raw/ directory. Returns path for in
Cloud Recon
Cloud misconfiguration scanner. Use for S3 bucket enumeration, Azure blob discovery, GCP storage checks, expos