enabling-cmek-encryption
Pass
Audited by Gen Agent Trust Hub on May 18, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes standard cloud provider CLI tools (aws, gcloud, az) and the official CockroachDB Cloud CLI (ccloud) to manage encryption keys and cluster configurations. All commands are relevant to the stated purpose of enabling CMEK.
- [DATA_EXFILTRATION]: There are no patterns indicating unauthorized data transfer or credential harvesting. The skill instructs the user on how to grant permissions to the service provider, which is a required step for CMEK functionality.
- [EXTERNAL_DOWNLOADS]: The skill links to official documentation from trusted sources including cockroachlabs.com, aws.amazon.com, cloud.google.com, and microsoft.com. No executable code or scripts are downloaded from external sources.
- [PROMPT_INJECTION]: No prompt injection attempts or bypass instructions were detected in the skill body or metadata.
- [CREDENTIALS_UNSAFE]: No hardcoded credentials or secrets were found. The skill uses placeholders (e.g., , ) for user-specific configuration values.
Audit Metadata