# Scoutsuite

> Use for cloud posture review across AWS, Azure, and GCP during authorized pentests. Trigger on control-plane inventory, exposed service review, identity analysis, and producing a structured view of cloud configuration risk.

- Skill: `timsonner/scoutsuite` (Agent Skill)
- Install (CLI): `npx skillmds@latest add timsonner/scoutsuite`
- Raw SKILL.md: https://api.skillmd.com/api/skills/timsonner/scoutsuite/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: DevOps & Infra
- License: MIT
- Author: timsonner (https://skillmd.com/u/timsonner)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/timsonner/scoutsuite

---


# ScoutSuite

## Purpose

Use this skill for broad but read-focused cloud posture review when the engagement needs a structured inventory of control-plane risk.

## Phase Fit

- Primary: Vulnerability Analysis
- Secondary: Discovery and Reconnaissance, Retest and Closure

## Use When

- Need a multi-service review of cloud exposure and posture.
- Need to surface identity, storage, and network misconfigurations efficiently.
- Need a repeatable baseline for retest.

## Avoid When

- Cloud credential scope is unclear.
- The engagement does not permit broad cloud inventory collection.

## Inputs

- Approved provider and account scope
- Authorized read-oriented credentials
- Output handling requirements

## Procedure

1. Confirm provider and account scope before collection.
2. Collect only within the approved cloud boundary.
3. Prioritize findings that materially affect identity, storage, or exposure.
4. Manually confirm important issues before escalation.
5. Preserve the exact collection scope for retest.

## Command Syntax

Replace sample profiles and accounts with approved in-scope values.

```bash
# AWS assessment using named profile
scout aws --profile pentest

# AWS limited to specific regions
scout aws --profile pentest --regions us-east-1,us-west-2

# AWS with report output directory
scout aws --profile pentest --report-dir ./contoso-scout-report/

# Azure assessment using Azure CLI credentials
scout azure --cli

# GCP assessment using user account
scout gcp --user-account

# Resume an interrupted scan
scout aws --profile pentest --resume

# Skip specific services
scout aws --profile pentest --services iam,s3
```

## Evidence to Capture

- Structured cloud posture findings tied to account scope
- Identity, storage, and exposure issues with business relevance
- Exact provider and credential context used

## Safety Boundaries

- Keep collection within the approved accounts or subscriptions.
- Protect output reports as sensitive evidence.