deploying-containers-to-amazon-lightsail
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- External Resource Download: The skill provides instructions to download the lightsailctl plugin from a remote Amazon S3 bucket.
- Evidence: The skill references official S3 links for Linux, Windows, and macOS installations in SKILL.md and troubleshooting.md.
- Context: This is a standard procedure for installing the necessary AWS CLI plugin from a trusted domain belonging to the service provider.
- Command Execution: The skill involves the execution of local shell commands to build images and interact with AWS services.
- Evidence: Commands such as docker build, git clone, and various aws lightsail operations are included in the workflow.
- Context: These operations are core to the skill's functionality for container management and deployment.
- Indirect Prompt Injection Surface: The skill includes a path for building images from external GitHub repositories, which involves ingesting third-party code.
- Ingestion points: Clones external content via git clone in references/github-source.md.
- Boundary markers: None are specified to delimit or sanitize the external repository's content.
- Capability inventory: The skill utilizes subprocess calls (Docker and AWS CLI) and file system access across all reference scripts.
- Sanitization: There is no mention of validating or sanitizing the repository's content before processing it for a build.
Audit Metadata