elastic-beanstalk
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill automatically detects the deployment platform by analyzing codebase signals, creating a surface where maliciously crafted project files could influence the generated configuration.
- Ingestion points: Codebase metadata files including
requirements.txt,package.json,pom.xml,go.mod, andGemfileare used to map applications to platform branches (references/platforms.md). - Boundary markers: The defined workflow explicitly requires user confirmation before the deployment commands are executed (
SKILL.md). - Capability inventory: The skill generates and executes shell commands via the AWS CLI and manages infrastructure via AWS CDK (TypeScript) and Terraform (
SKILL.md). - Sanitization: The instructions do not specify validation or sanitization of strings extracted from the codebase (such as application names or version constraints) before they are interpolated into the generated commands or IaC templates.
- [COMMAND_EXECUTION]: The skill is designed to orchestrate complex deployment workflows by executing multiple shell commands and infrastructure management tools.
- Evidence: The skill generates multi-step AWS CLI workflows (e.g.,
create-storage-location,create-application,create-environment) and supports complex IaC templates for CDK and Terraform (SKILL.md,references/configuration.md).
Audit Metadata