troubleshooting-s3-files
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- Command Execution Templates: The skill provides templates for AWS CLI and shell commands (e.g.,
aws s3files,nc,getfattr) to diagnose and resolve file system issues. - These templates use placeholders like
fs-IDandREGION, which are intended to be replaced with user-supplied values. This pattern requires the execution environment to handle inputs carefully to prevent unintended command interpretation. - Privilege Escalation (Administrative Access): Certain troubleshooting steps involve the use of
sudofor tasks like installing theamazon-efs-utilspackage or collecting system logs for support. - These actions grant the skill administrative control over the host system, which is a standard requirement for system-level configuration and maintenance tasks.
- Infrastructure Modification: Commands such as
aws ec2 authorize-security-group-ingressandaws ec2 modify-vpc-attributeare provided to resolve connectivity and DNS issues. - These operations modify the security and networking posture of the AWS environment. Users should ensure these changes align with their specific environment's security policies.
- Indirect Prompt Injection Surface: The skill processes external data (file system IDs, regions, VPC IDs) by interpolating them into shell commands.
- Ingestion points: Placeholders in
SKILL.md(e.g.,fs-ID,REGION,vpc-ID,sg-MT). - Boundary markers: None present to explicitly delimit user input from command logic.
- Capability inventory: Includes capabilities for network testing (
nc), system modification (sudo yum), and cloud infrastructure changes (aws ec2). - Sanitization: No specific input sanitization or validation logic is defined within the skill instructions.
Audit Metadata