localstack-deploy
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for executing
lstkcommands to proxy infrastructure-as-code tools including Terraform, AWS CDK, and AWS SAM. These commands are used to manage local cloud resources. - [EXTERNAL_DOWNLOADS]: Recommends installing the
pulumi-localpackage from a package registry to support Pulumi deployments. This is a vendor-supported wrapper for LocalStack integration. - [DATA_EXFILTRATION]: Instructs the agent on how to use
lstk setup awsto modify sensitive configuration files, specifically~/.aws/configand~/.aws/credentials. This is standard behavior for configuring local AWS emulation but involves sensitive path access. - [INDIRECT_PROMPT_INJECTION]: The skill processes infrastructure-as-code templates which may contain untrusted data if obtained from external sources.
- Ingestion points: Reads Terraform
.tffiles, CloudFormation/SAMtemplate.yamlfiles, and Pulumi programs from the local directory (SKILL.md). - Boundary markers: No specific delimiters or instructions to ignore embedded prompts within the templates are defined.
- Capability inventory: The skill uses
lstkto execute deployment commands that can perform shell execution, file operations, and network activity. - Sanitization: The skill does not describe any sanitization or validation steps for the content of the processed IaC templates.
Audit Metadata