chaos-engineering-on-aws

Pass

Audited by Gen Agent Trust Hub on Sep 21, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references and installs several external dependencies from established sources during its workflow.
  • Installs Chaos Mesh using Helm from its official repository at https://charts.chaos-mesh.org.
  • References experiment templates and documentation from the official aws-samples GitHub organization.
  • Downloads SQL Server tools from Microsoft's official package repository during database stress testing.
  • [COMMAND_EXECUTION]: Extensive use of high-privilege CLI tools is central to the skill's primary function of fault injection.
  • Orchestrates experiments using aws fis, aws cloudwatch, and aws ec2 via background bash scripts.
  • Manages Kubernetes-level disruptions using kubectl for applying and deleting Chaos Mesh custom resources.
  • Includes a setup-prerequisites.sh script that automates the creation of IAM roles and CloudWatch alarms with broad infrastructure permissions.
  • [INDIRECT_PROMPT_INJECTION]: The skill's workflow is designed to ingest untrusted data from external assessment reports to determine its execution targets.
  • Ingestion points: references/workflow-guide.md describes the parsing of Markdown assessment reports and assessment.json files generated by the eks-resilience-checker skill.
  • Boundary markers: No specific delimiters or "ignore embedded instructions" warnings are utilized when parsing these external inputs.
  • Capability inventory: The skill possesses highly impactful capabilities, including the ability to terminate instances, disrupt network connectivity, and failover databases.
  • Sanitization: There is no explicit logic described to sanitize or validate the content of these reports before the agent uses them to recommend or execute experiments.
  • [DYNAMIC_EXECUTION]: Complex fault scenarios are implemented using embedded scripts within configuration templates.
  • Several SSM Automation documents, such as references/fis-templates/database-connection-exhaustion/ssm-automation.yaml, contain Python scripts that are deployed and executed on target infrastructure.
  • These scripts are used for logic that cannot be achieved via simple API calls, such as maintaining persistent database connection pools for load testing.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 21, 2026, 08:10 PM