asset-inventory
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes shell scripts (
aws-asset-discovery.sh,multi-cloud-discovery.sh) that use standard cloud CLI commands (aws,az,gcloud) to query resource metadata. These are intended for administrative discovery tasks and operate within the user's existing authenticated session. - [DATA_EXPOSURE]: The discovery scripts collect resource metadata (instance IDs, IPs, ARNs) and save them to a local
./asset-inventory/directory. This is standard behavior for an inventory tool. - [SAFE]: The Python script for CMDB integration uses
requeststo push data to a user-defined URL using a bearer token provided by the user. It follows standard API interaction patterns and does not contain hardcoded credentials or malicious destinations. - [SAFE]: The provided AWS Config and Tag Policy configurations are best-practice templates for security compliance and governance.
Audit Metadata