ecs-express
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFEPRIVILEGE_ESCALATIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [PRIVILEGE_ESCALATION]: The skill instructs the agent to create IAM roles (ecsTaskExecutionRole, ecsInfrastructureRoleForExpressServices) with specific managed policies if they do not already exist. While these are standard roles for ECS deployments, IAM management is a high-privilege capability.
- [COMMAND_EXECUTION]: The skill relies on executing shell commands via the AWS CLI and Docker CLI to build images, push to ECR, and manage ECS services. It includes specific commands for create-express-gateway-service and update-service.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data by searching the user's local codebase for configuration parameters such as port numbers and environment variables. \n- Ingestion points: Local codebase files (searched to identify service name, port, health check, and envvars).\n- Boundary markers: None specified for the codebase search process.\n- Capability inventory: File writing (compose.yml), container building/pushing (docker), IAM role creation (aws iam), and service deployment (aws ecs).\n- Sanitization: The skill mitigates risks by requiring the agent to present all identified values to the user for confirmation before proceeding with deployment.
Audit Metadata