chaos-engineering-on-aws
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references and installs several external dependencies from established sources during its workflow.
- Installs Chaos Mesh using Helm from its official repository at
https://charts.chaos-mesh.org. - References experiment templates and documentation from the official
aws-samplesGitHub organization. - Downloads SQL Server tools from Microsoft's official package repository during database stress testing.
- [COMMAND_EXECUTION]: Extensive use of high-privilege CLI tools is central to the skill's primary function of fault injection.
- Orchestrates experiments using
aws fis,aws cloudwatch, andaws ec2via background bash scripts. - Manages Kubernetes-level disruptions using
kubectlfor applying and deleting Chaos Mesh custom resources. - Includes a
setup-prerequisites.shscript that automates the creation of IAM roles and CloudWatch alarms with broad infrastructure permissions. - [INDIRECT_PROMPT_INJECTION]: The skill's workflow is designed to ingest untrusted data from external assessment reports to determine its execution targets.
- Ingestion points:
references/workflow-guide.mddescribes the parsing of Markdown assessment reports andassessment.jsonfiles generated by theeks-resilience-checkerskill. - Boundary markers: No specific delimiters or "ignore embedded instructions" warnings are utilized when parsing these external inputs.
- Capability inventory: The skill possesses highly impactful capabilities, including the ability to terminate instances, disrupt network connectivity, and failover databases.
- Sanitization: There is no explicit logic described to sanitize or validate the content of these reports before the agent uses them to recommend or execute experiments.
- [DYNAMIC_EXECUTION]: Complex fault scenarios are implemented using embedded scripts within configuration templates.
- Several SSM Automation documents, such as
references/fis-templates/database-connection-exhaustion/ssm-automation.yaml, contain Python scripts that are deployed and executed on target infrastructure. - These scripts are used for logic that cannot be achieved via simple API calls, such as maintaining persistent database connection pools for load testing.
Audit Metadata