atmos-aws-cloudformation

Pass

Audited by Gen Agent Trust Hub on Oct 23, 2026

Risk Level: SAFE
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes and renders CloudFormation templates which can be sourced from external or third-party repositories.
  • Ingestion points: Templates and stack policies are ingested from local paths or remote URIs (Git/S3) defined in the source or path fields.
  • Boundary markers: Supports escaping for Go template delimiters to prevent unintended rendering, though it relies on the user to ensure template integrity.
  • Capability inventory: Executes stack mutations via AWS CloudFormation API, manages S3 artifact backends, and triggers lifecycle hooks.
  • Sanitization: Includes local validation for IAM capabilities and a presentation-layer masker to redact secrets in CLI output.
  • [EXTERNAL_DOWNLOADS]: Implements a JIT-vendoring mechanism to fetch templates from remote locations.
  • Evidence: The source.uri field allows fetching components from Git repositories and S3 buckets at runtime.
  • Context: This is a core feature for infrastructure-as-code orchestration, enabling versioned template management.
  • [COMMAND_EXECUTION]: Mentions the availability of a !exec function within templates and hooks.
  • Evidence: Documentation notes that !exec can be used within the Atmos environment for dynamic value resolution.
  • Context: The usage is presented as a developer feature for custom orchestration logic within a controlled Atmos environment.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 23, 2026, 07:52 AM