implementing-aws-security-hub
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides standard workflows for AWS Cloud Security Posture Management (CSPM). The instructions and scripts utilize documented AWS CLI commands and the boto3 library to interact with the AWS Security Hub service.
- [EXTERNAL_DOWNLOADS]: The skill references the
boto3Python package, which is the official and trusted AWS SDK for Python. This is documented neutrally as a prerequisite for the script's functionality. - [COMMAND_EXECUTION]: The skill includes shell commands for the AWS CLI (e.g.,
aws securityhub enable-security-hub). These commands are standard operations for the described task and do not involve unauthorized privilege escalation or dangerous execution patterns. - [INDIRECT_PROMPT_INJECTION]: The script
scripts/agent.pyingests security findings from the AWS Security Hub API. While these findings originate from external services (GuardDuty, Inspector, etc.), the data is handled programmatically to generate reports and does not influence the agent's logic in a way that poses a prompt injection risk.
Audit Metadata