create-install-scripts
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEPRIVILEGE_ESCALATIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PRIVILEGE_ESCALATION]: The
scripts/setup-cicd.shscript attaches theAdministratorAccessmanaged policy to a newly created IAM role. While the script includes a warning to use more restrictive policies in production, this configuration grants the deployment pipeline full control over the AWS account resources. - [COMMAND_EXECUTION]: The skill provides and generates shell scripts that interact with the local system and the AWS CLI to manage infrastructure, including creating S3 buckets, IAM roles, and CodeBuild projects.
- [INDIRECT_PROMPT_INJECTION]: The skill analyzes local project structures and interpolates user-supplied values into generated scripts, which presents a surface for potential data manipulation.
- Ingestion points: Ingests CDK project configuration and interactive prompt responses (e.g., stack names, authentication methods, email addresses).
- Boundary markers: No specific delimiters or markers are implemented to isolate ingested project data from the script generation logic.
- Capability inventory: Extensive use of file system writes, shell script generation, and AWS CLI calls for resource provisioning.
- Sanitization: Values are interpolated into configuration files and scripts with minimal escaping or validation.
- [EXTERNAL_DOWNLOADS]: The documentation in
references/common-pitfalls.mddescribes the procedure for downloading the official AWS CLI v2 installation package from Amazon's servers if a manual upgrade is required.
Audit Metadata