enumerating-cloud-with-cloudfox

Pass

Audited by Gen Agent Trust Hub on Aug 5, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The scripts/agent.py script uses subprocess.run to execute the cloudfox command-line tool. It constructs commands using a list of arguments, which includes user-supplied inputs for the provider, profile, and output directory. This is a standard pattern for CLI wrapper scripts.
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions to download and install cloudfox from its official GitHub repository (github.com/BishopFox/cloudfox) or via Homebrew. The repository belongs to Bishop Fox, a recognized security firm, and the installation methods are standard for Go-based security tools.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 5, 2026, 10:38 AM
Security Audit — agent-trust-hub — enumerating-cloud-with-cloudfox