Describe it. Get the script.

Start from a prompt that already works

Sixteen prompts we have actually used. Pick one, edit it, generate.

Read-only scripts that tell you what is actually deployed, not what the documentation claims.

• Privileged AD group membership reportPowerShellReport every member of Domain Admins, Enterprise Admins, Schema Admins and Account Operators, including nested groups, resolving each to a named person where possible. Flag accounts with a password older than 365 days, accounts that have never logged on, and any account whose name does not match our naming convention for privileged accounts. Export CSV. Read-only.Use this prompt
• Certificate expiry sweep across a host listPythonGiven a list of host:port pairs, connect to each, retrieve the served certificate chain, and report subject, issuer, SAN list, days to expiry and whether the chain validates against the system trust store. Sort by days remaining. Exit non-zero if anything expires within 21 days so it can gate a pipeline. Handle timeouts and hosts that do not speak TLS without crashing.Use this prompt
• Group Policy drift against a baselinePowerShellExport every GPO to XML, compare against a baseline directory of previously exported GPOs, and report added, removed and modified settings per policy. Ignore version numbers and timestamps that change on every export. Produce a readable per-policy diff, not a raw XML dump.Use this prompt
• IAM key age and unused permission reviewPythonFor every IAM user, report access key age, last used date and service, MFA state, and attached policies. Use the credential report and the access advisor data to identify permissions granted but never exercised in 90 days. Flag keys older than 90 days and any user with console access and no MFA. Read-only, CSV output.Use this prompt