Axguard Cloud — Development skill for Claude Code
Cloud and CORS misconfig — metadata URLs, wildcard origins.
How to install Axguard Cloud
Installs to ~/.claude/skills/awarexone-axguard-axguard-cloud/SKILL.md
mkdir -p ~/.claude/skills/awarexone-axguard-axguard-cloud && curl -fsSL https://raw.githubusercontent.com/Awarexone/AXguard/HEAD/commands/axguard-cloud.md -o ~/.claude/skills/awarexone-axguard-axguard-cloud/SKILL.md Restart Claude Code, or start a new session, for it to be picked up.
What Axguard Cloud does
description: Cloud and CORS misconfig — metadata URLs, wildcard origins. Usage: /axguard-cloud [path]
/axguard-cloud
**Specialist:** Cloud Reviewer
Usage
/axguard-cloud
Focus
- Metadata IP usage in app code
Access-Control-Allow-Origin: *with credentialed APIs- Overly broad IAM / public buckets (manual when IaC present)
Steps
- Scan → keep
cloud.*. - Inspect IaC / CI for public storage and wildcard principals when those files exist.
- Report concrete
Alternatives in Development
- CORS — Scan an endpoint for CORS misconfiguration — arbitrary-origin reflection, null-origin trust, credential exposu 4.5k ★
- Apify Collect — Collect job-posting URLs into ~/.dear-hiring-manager/urls.txt by running your Apify job scraper, for /batch 107 ★
- Serve — Start a local http server on 127.0.0.1:4567 to avoid file:// CORS issues 102 ★
Full documentation available on GitHub
View Source RepositoryRelated Skills
Axguard GraphQL
GraphQL misconfig — introspection enabled, CSRF prevention off. Usage: /axguard-graphql [path]
Axguard Ssrf
SSRF and unsafe egress — user-influenced fetch/requests, metadata IPs. Usage: /axguard-ssrf [path]
Axguard Auth
AuthZ / IDOR / JWT / CSRF footgun hunt. Usage: /axguard-auth [path]
Malware Sandbox MCP
Detonate files & URLs in cloud malware sandboxes (Hybrid Analysis, tria.ge, ANY.RUN) and enrich IOCs across Ma
Reel Sources
Inventories and diagnoses the available photo and video sources - how many pieces there are, from which dates,
Construction Update
Turn site progress notes and photos into a built-in-the-open update across channels. Usage: /construction-upda
Related Agents
Ext Attack Planner
Reasons from an external-pentest inventory to the most likely footholds in an authorized engagement. Correlate
Phase 0 Figma Discover
Figma-input variant of Phase 0 in the Next.js clone pipeline. Reads a Figma design via the official Figma MCP
Session Pattern Analyzer
Analyzes Claude Code session JSONL files to extract execution patterns: plan-ratio, delegation, parallel usage