cspm-aws-cis-benchmark
Pass
Audited by Gen Agent Trust Hub on Apr 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No prompt injection or behavior override patterns were detected in the instructions or metadata. The skill instructions focus on performing security assessments and explicitly state that it should not be used for remediation.
- [SAFE]: The skill uses the standard boto3 library to interact with AWS APIs. All API calls identified are read-only (e.g., list, describe, get) as specified in the SecurityAudit managed policy.
- [SAFE]: No evidence of data exfiltration was found. Findings are processed locally and presented via standard output or structured JSON format without being sent to external third-party endpoints.
- [SAFE]: The skill does not contain obfuscated code, hidden logic, or attempts to download and execute remote scripts.
Audit Metadata