aws-security-scanner
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEOBFUSCATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill implements standard AWS security auditing procedures using official AWS CLI tools. The commands target common AWS services to identify misconfigurations like public access or missing encryption without introducing malicious logic.
- [OBFUSCATION]: The skill uses base64 decoding to process the standard output of the AWS IAM credential report. This is a functional requirement of the AWS API and does not represent an attempt to hide malicious logic.
- [INDIRECT_PROMPT_INJECTION]: The skill reads data from external AWS resource configurations. While this provides a theoretical surface for indirect prompt injection where resource names or policies could contain instructions, the risk is inherent to the auditing use case and does not involve unsafe interpolation into shell commands.
Audit Metadata