aws-compliance-checker
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides several bash scripts (
cis-iam-checks.sh,cis-logging-checks.sh,cis-monitoring-checks.sh,cis-networking-checks.sh,hipaa-checker.sh) that execute AWS CLI commands to retrieve metadata about the environment (IAM users, CloudTrail logs, S3 bucket ACLs, and Security Group rules) for security auditing purposes. - [COMMAND_EXECUTION]: Includes Python scripts (
pci-dss-checker.py,compliance-report.py) that utilize theboto3library to query AWS resource configurations and write audit results to local JSON files. - [SAFE]: All operations are consistent with the stated purpose of performing automated compliance checks. No evidence of data exfiltration, credential harvesting, or unauthorized remote code execution was found.
Audit Metadata