skills/mukul975/anthropic-cybersecurity-skills/implementing-aws-macie-for-data-classification/Gen Agent Trust Hub
implementing-aws-macie-for-data-classification
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill contains logic to process external data, specifically Amazon Macie finding details and S3 bucket metadata.
- Ingestion points: The
scripts/agent.pyandscripts/process.pyscripts ingest finding data vialist_findingsandget_findings. Additionally, the Lambda remediation template inSKILL.mdprocesses event details containing finding types and bucket information. - Boundary markers: No specific delimiters or instructions to ignore embedded content within the finding data are present in the scripts or templates.
- Capability inventory: The system possesses capabilities to tag S3 objects (
put_object_tagging) and publish messages to SNS topics (sns.publish) based on the ingested data. - Sanitization: Finding attributes such as
sensitive_typesandseverityare used directly in S3 tags and SNS messages without explicit validation or escaping.
Audit Metadata