soc2-compliance
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides a bash script and GitHub Actions configuration that execute commands using the
awsandgh(GitHub) CLI tools. These commands are used to collect audit evidence such as IAM credential reports, organization member lists, and branch protection rules. This execution is central to the skill's functionality for compliance monitoring. - [DATA_EXFILTRATION]: The skill script automates the retrieval of sensitive security metadata (e.g., MFA status, access analyzer findings) and saves it to a local directory for audit packaging. While this involves accessing security configuration data, the data remains within the user's local environment or CI/CD runner, and the operations are standard for SOC 2 evidence collection.
Audit Metadata