emulating-cloud-attacks-with-stratus-red-team

Pass

Audited by Gen Agent Trust Hub on Aug 3, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs users to install Stratus Red Team from official Datadog repositories via Go, Homebrew, and Docker. These references target a well-known security vendor and are necessary for the skill's adversary emulation functionality.
  • [COMMAND_EXECUTION]: The scripts/agent.py script interacts with the stratus CLI using the subprocess module. The implementation passes arguments as a list rather than a single string, which is a secure practice that avoids shell injection vulnerabilities.
  • [SAFE]: No malicious patterns, such as prompt injection, persistence mechanisms, or obfuscated code, were detected. The skill's behavior is consistent with its stated purpose of cloud security validation and includes appropriate legal and cost warnings for the user.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 3, 2026, 10:30 PM
Security Audit — agent-trust-hub — emulating-cloud-attacks-with-stratus-red-team