aws-diagrams
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Interacts with
https://app.eraser.io/api/render/elementsto render diagrams. This is a well-known service for the skill's primary functionality. - [COMMAND_EXECUTION]: Executes
curlcommands to transmit generated DSL to the Eraser API. This is the intended method for rendering the architecture diagrams. - [DATA_EXFILTRATION]: Transmits AWS infrastructure metadata, such as VPC IDs, CIDR blocks, and resource relationships, to the Eraser platform. This data transfer is required for the skill to perform its core function of visualizing infrastructure.
- [INDIRECT_PROMPT_INJECTION]: Processes untrusted user input from CloudFormation templates (YAML/JSON) and AWS CLI output. While this creates an attack surface for indirect prompt injection, the skill's logic is limited to parsing metadata for diagram generation, which presents a low risk.
Audit Metadata