troubleshooting-s3-files

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • Command Execution Templates: The skill provides templates for AWS CLI and shell commands (e.g., aws s3files, nc, getfattr) to diagnose and resolve file system issues.
  • These templates use placeholders like fs-ID and REGION, which are intended to be replaced with user-supplied values. This pattern requires the execution environment to handle inputs carefully to prevent unintended command interpretation.
  • Privilege Escalation (Administrative Access): Certain troubleshooting steps involve the use of sudo for tasks like installing the amazon-efs-utils package or collecting system logs for support.
  • These actions grant the skill administrative control over the host system, which is a standard requirement for system-level configuration and maintenance tasks.
  • Infrastructure Modification: Commands such as aws ec2 authorize-security-group-ingress and aws ec2 modify-vpc-attribute are provided to resolve connectivity and DNS issues.
  • These operations modify the security and networking posture of the AWS environment. Users should ensure these changes align with their specific environment's security policies.
  • Indirect Prompt Injection Surface: The skill processes external data (file system IDs, regions, VPC IDs) by interpolating them into shell commands.
  • Ingestion points: Placeholders in SKILL.md (e.g., fs-ID, REGION, vpc-ID, sg-MT).
  • Boundary markers: None present to explicitly delimit user input from command logic.
  • Capability inventory: Includes capabilities for network testing (nc), system modification (sudo yum), and cloud infrastructure changes (aws ec2).
  • Sanitization: No specific input sanitization or validation logic is defined within the skill instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 11:58 AM