iam-policy-creator

Pass

Audited by Gen Agent Trust Hub on Sep 9, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided requirements to generate IAM policies and has access to powerful tools like Bash(aws:*) and Write. This creates a vulnerability surface where maliciously crafted data could attempt to influence the generated policy or command execution, although no active malicious patterns were found in the skill's instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 9, 2026, 03:43 AM