skills/mukul975/anthropic-cybersecurity-skills/configuring-aws-verified-access-for-ztna/Gen Agent Trust Hub
configuring-aws-verified-access-for-ztna
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a legitimate collection of tools and documentation for Zero Trust Network Access (ZTNA) on AWS. All scripts and templates align with the stated purpose of auditing and configuring cloud security infrastructure.
- [EXTERNAL_DOWNLOADS]: References the boto3 library and the hashicorp/aws Terraform provider. These are well-known, industry-standard tools for AWS automation and infrastructure-as-code.
- [DATA_EXPOSURE]: Includes documentation and templates using placeholders for secrets (e.g., 'client-secret-here'), following standard security practices for example configurations.
- [INDIRECT_PROMPT_INJECTION]: The scripts/agent.py script ingests data from AWS API responses (via describe_verified_access_* calls). While this represents a potential surface for indirect prompt injection through resource metadata, the script only performs read-only audit tasks and does not pass this data to sensitive execution sinks.
Audit Metadata