skills/mukul975/anthropic-cybersecurity-skills/implementing-cloud-security-posture-management/Gen Agent Trust Hub
implementing-cloud-security-posture-management
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of prowler and scoutsuite via pip. These are established security auditing tools from reputable sources.
- [COMMAND_EXECUTION]: The script scripts/agent.py executes the prowler command-line utility via subprocess.run() to perform security scans.
- [INDIRECT_PROMPT_INJECTION]: The skill processes findings from cloud APIs and security tools, creating a surface for processing untrusted external data. Ingestion points: JSON/CSV findings files in scripts/agent.py and the aggregator logic in SKILL.md. Boundary markers: Absent; data is directly interpolated into reports. Capability inventory: Subprocess calls to prowler and various cloud CLI tools. Sanitization: Data is normalized and hashed for deduplication but not sanitized for injection sequences.
Audit Metadata