create-install-scripts

Pass

Audited by Gen Agent Trust Hub on Sep 28, 2026

Risk Level: SAFEPRIVILEGE_ESCALATIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [PRIVILEGE_ESCALATION]: The scripts/setup-cicd.sh script attaches the AdministratorAccess managed policy to a newly created IAM role. While the script includes a warning to use more restrictive policies in production, this configuration grants the deployment pipeline full control over the AWS account resources.
  • [COMMAND_EXECUTION]: The skill provides and generates shell scripts that interact with the local system and the AWS CLI to manage infrastructure, including creating S3 buckets, IAM roles, and CodeBuild projects.
  • [INDIRECT_PROMPT_INJECTION]: The skill analyzes local project structures and interpolates user-supplied values into generated scripts, which presents a surface for potential data manipulation.
  • Ingestion points: Ingests CDK project configuration and interactive prompt responses (e.g., stack names, authentication methods, email addresses).
  • Boundary markers: No specific delimiters or markers are implemented to isolate ingested project data from the script generation logic.
  • Capability inventory: Extensive use of file system writes, shell script generation, and AWS CLI calls for resource provisioning.
  • Sanitization: Values are interpolated into configuration files and scripts with minimal escaping or validation.
  • [EXTERNAL_DOWNLOADS]: The documentation in references/common-pitfalls.md describes the procedure for downloading the official AWS CLI v2 installation package from Amazon's servers if a manual upgrade is required.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 28, 2026, 08:16 AM