aws-diagrams

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Interacts with https://app.eraser.io/api/render/elements to render diagrams. This is a well-known service for the skill's primary functionality.
  • [COMMAND_EXECUTION]: Executes curl commands to transmit generated DSL to the Eraser API. This is the intended method for rendering the architecture diagrams.
  • [DATA_EXFILTRATION]: Transmits AWS infrastructure metadata, such as VPC IDs, CIDR blocks, and resource relationships, to the Eraser platform. This data transfer is required for the skill to perform its core function of visualizing infrastructure.
  • [INDIRECT_PROMPT_INJECTION]: Processes untrusted user input from CloudFormation templates (YAML/JSON) and AWS CLI output. While this creates an attack surface for indirect prompt injection, the skill's logic is limited to parsing metadata for diagram generation, which presents a low risk.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 03:45 PM