cloud-security
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill follows security best practices for a cloud auditing utility. The provided Python script
cloud_posture_check.pyperforms static analysis of JSON configuration files without executing remote code or accessing unauthorized system resources. Its behavior matches the stated purpose of cloud security posture management.- [INDIRECT_PROMPT_INJECTION]: The skill has a data ingestion surface as it processes external JSON files provided by the user. However, the risk is minimal as the script performs deterministic logic on structured data and does not interpolate the content into natural language prompts for further autonomous agent actions. - Ingestion points:
scripts/cloud_posture_check.pyreads JSON files via file path arguments. - Boundary markers: The script expects structured JSON data and performs specific value checks rather than general text processing.
- Capability inventory: The script's capabilities are limited to reading local files and writing report output.
- Sanitization: Employs the standard
jsonlibrary for parsing, preventing common injection vectors associated with unstructured data.
Audit Metadata