serverless
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a specialized security auditing tool for serverless environments, focusing on AWS Lambda, IAM policies, and Infrastructure-as-Code (IaC).
- [SAFE]: The workflow involves legitimate security auditing processes, including scoping files, detecting available scanners (semgrep, checkov, tfsec), and performing analysis based on established CWE patterns (e.g., CWE-250, CWE-94, CWE-312, CWE-377, CWE-400).
- [SAFE]: Command execution is restricted to running local security scanners on user-provided code targets, which is consistent with the skill's primary purpose.
- [SAFE]: Detection patterns in
references/detection-patterns.mdprovide clear guidance for identifying vulnerabilities and offer secure coding alternatives for Python, JavaScript, and Go. - [SAFE]: No evidence of prompt injection, data exfiltration, or obfuscation was found in the skill's instructions or metadata.
Audit Metadata