atmos-aws-cloudformation
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes and renders CloudFormation templates which can be sourced from external or third-party repositories.
- Ingestion points: Templates and stack policies are ingested from local paths or remote URIs (Git/S3) defined in the
sourceorpathfields. - Boundary markers: Supports escaping for Go template delimiters to prevent unintended rendering, though it relies on the user to ensure template integrity.
- Capability inventory: Executes stack mutations via AWS CloudFormation API, manages S3 artifact backends, and triggers lifecycle hooks.
- Sanitization: Includes local validation for IAM capabilities and a presentation-layer masker to redact secrets in CLI output.
- [EXTERNAL_DOWNLOADS]: Implements a JIT-vendoring mechanism to fetch templates from remote locations.
- Evidence: The
source.urifield allows fetching components from Git repositories and S3 buckets at runtime. - Context: This is a core feature for infrastructure-as-code orchestration, enabling versioned template management.
- [COMMAND_EXECUTION]: Mentions the availability of a
!execfunction within templates and hooks. - Evidence: Documentation notes that
!execcan be used within the Atmos environment for dynamic value resolution. - Context: The usage is presented as a developer feature for custom orchestration logic within a controlled Atmos environment.
Audit Metadata