skills/aws-samples/sample-sagemaker-marketplace-onboarding-skill/sagemaker-marketplace-onboarding/Gen Agent Trust Hub
sagemaker-marketplace-onboarding
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill scaffolds shell scripts (
package_model.sh,test_local.sh) and Python code that usesubprocessand CLI tools (likeaws,tar, anddocker) to perform model packaging, S3 uploads, and local container testing. - [PRIVILEGE_ESCALATION]: The generated Dockerfile templates run as the
rootuser. This is a documented requirement of the SageMaker Marketplace contract to ensure that model artifacts can be properly mounted and accessed at/opt/ml/model/during deployment. - [INDIRECT_PROMPT_INJECTION]: The skill performs an inventory phase where it reads existing local files (dependency manifests, Dockerfiles, and entry points). These contents are used to guide the walkthrough, representing a surface for instructions in processed data to influence the agent, although the skill mitigates this by requiring explicit user confirmation before moving between phases.
Audit Metadata