localstack-deploy

Pass

Audited by Gen Agent Trust Hub on Oct 9, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides instructions for executing lstk commands to proxy infrastructure-as-code tools including Terraform, AWS CDK, and AWS SAM. These commands are used to manage local cloud resources.
  • [EXTERNAL_DOWNLOADS]: Recommends installing the pulumi-local package from a package registry to support Pulumi deployments. This is a vendor-supported wrapper for LocalStack integration.
  • [DATA_EXFILTRATION]: Instructs the agent on how to use lstk setup aws to modify sensitive configuration files, specifically ~/.aws/config and ~/.aws/credentials. This is standard behavior for configuring local AWS emulation but involves sensitive path access.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes infrastructure-as-code templates which may contain untrusted data if obtained from external sources.
  • Ingestion points: Reads Terraform .tf files, CloudFormation/SAM template.yaml files, and Pulumi programs from the local directory (SKILL.md).
  • Boundary markers: No specific delimiters or instructions to ignore embedded prompts within the templates are defined.
  • Capability inventory: The skill uses lstk to execute deployment commands that can perform shell execution, file operations, and network activity.
  • Sanitization: The skill does not describe any sanitization or validation steps for the content of the processed IaC templates.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 9, 2026, 05:38 AM