Network Security Group Auditor

Updated May 27, 2026

What this skill does

Audits AWS Security Groups, NACLs, and firewall rules for overly permissive configurations. Identifies rules allowing unrestricted ingress (0.0.0.0/0), unnecessary open ports, unused security groups, and public-facing resources that should be private. Generates a prioritized remediation report with specific rule changes.

Example

PROMPT

We need to audit our security groups across 3 AWS accounts with 45 VPCs. Focus on: public-facing rules (0.0.0.0/0), overly broad ports (e.g., 22, 3389 wide open), unused security groups, and resources attached to overly permissive SGs.

OUTPUT

Network Security Group Audit — 3 Accounts, 45 VPCs FINDINGS SUMMARY | Finding Type | Count | |---------------------------|-------| | Rules with 0.0.0.0/0 | 23 | | Overly broad ports (22,3389)| 18 | | Unused security groups | 41 | | Resources with public SG | 156 | | NACLs with 0.0.0.0/0 | 7 | CRITICAL: 23 ingress rules allow 0.0.0.0/0 - sg-abc123: port 22, 443 (web tier — review 443, restrict 22) - sg-def456: port 3389 (app tier — restrict to jump host) - sg-ghi789: port 5432 (DB — CRITICAL: restrict immediately) UNUSED GROUPS: 41 security groups with zero attachments Top 5 by age: sg-old1 (340d), sg-old2 (301d), sg-old3 (287d)...

Required Tools

AWS

Compatible Agents

Claude

Cursor

Windsurf

ChatGPT

GitHub Copilot

Any MCP-compatible agent

Add to your agent

Download Skill

Or install via CLI:
$ npx skills add webrix-ai/agent-skills --skill network-security-group-auditor

Deploy Org-wide

Provision to teams via RBAC

Identity-aware execution

Signed & verified skills

Full audit trail

Auto-bundled with required MCP servers

Use with

Free for up to 5 users

Related Skills

A/B Testing

Helps design statistically rigorous A/B tests for marketing campaigns, landing pages, and product features. Calculates required sample sizes, defines success metrics, sets up test variants, and analyzes results with confidence intervals. Prevents common testing mistakes like peeking and underpowered tests.

AI Adoption Dashboard Builder

Creates a multi-tab analytics dashboard for tracking AI tool adoption across your engineering organization. Includes executive KPIs, team-level adoption curves, per-tool usage breakdowns, productivity impact comparisons, and cost tracking. Optionally generates a Grafana dashboard JSON for real-time monitoring.

AI Adoption Readiness Assessment

A structured assessment framework that scores your organization across five critical dimensions of AI readiness. Produces an actionable scorecard with prioritized recommendations, a detailed gap analysis spreadsheet, and optional Jira tickets to track remediation efforts.

AI Champion Onboarding Kit

Creates a complete onboarding package for department-level AI champions who will drive adoption within their teams. Includes a modular training curriculum (AI fundamentals, tool-specific training, change management, security), a week-by-week rollout playbook, success metrics with targets, and ready-to-use templates for workshops, surveys, and team communications.

Your agents are already in the wild.

Give them a Basecamp. Go from AI chaos to AI work, in minutes.

Get Started

See a Demo