skills/mukul975/anthropic-cybersecurity-skills/implementing-envelope-encryption-with-aws-kms/Gen Agent Trust Hub
implementing-envelope-encryption-with-aws-kms
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data which could potentially contain malicious instructions.
- Ingestion points: The scripts
scripts/agent.pyandscripts/process.pyread data from files specified by the user via the--inputcommand-line argument. - Boundary markers: There are no explicit boundary markers or instructions to ignore embedded commands within the processed data files.
- Capability inventory: The skill utilizes
boto3to interact with AWS KMS APIs andcryptographyfor local encryption, and it has capabilities for reading and writing to the local file system. - Sanitization: No sanitization or validation of the data content is performed prior to encryption or after decryption, as the tools operate on raw bytes.
- [COMMAND_EXECUTION]: The skill includes Python scripts designed to be executed from the command line to perform cryptographic operations and AWS resource discovery. These scripts take user-controlled inputs for file paths and KMS key identifiers to perform their intended functions.
Audit Metadata