localstack-state
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill defines several commands using the lstk utility to perform state management tasks such as saving snapshots, loading Cloud Pods, and managing persistence volumes. These operations are essential to the functionality of the LocalStack emulator.
- [INDIRECT_PROMPT_INJECTION]: The skill provides the ability to import state from external and potentially untrusted sources such as S3 buckets or shared Cloud Pods.
- Ingestion points: Data is ingested via the lstk load command from local paths, S3 URLs, and Cloud Pod identifiers.
- Boundary markers: There are no explicit instructions or delimiters provided to prevent the agent from interpreting content within a loaded snapshot as instructions.
- Capability inventory: The agent can execute lstk CLI commands to modify the infrastructure environment and emulator configuration.
- Sanitization: No specific sanitization or validation of the snapshot content is described, which is standard for infrastructure-as-code and state management tooling.
Audit Metadata