securing-serverless-functions
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides legitimate security auditing functionality for cloud serverless environments. The included Python script (
scripts/agent.py) uses the official AWS SDK (boto3) to inspect function configurations for common security risks like missing authentication, shared execution roles, and lack of resource limits. - [DATA_EXFILTRATION]: The auditing script scans environment variables for potential secrets (e.g., keys, passwords) but notably does not extract or print the values of these variables. It only identifies the existence of keys matching sensitive patterns to flag them for review, and does not perform any unauthorized external network operations.
- [COMMAND_EXECUTION]: The skill includes documentation and examples for using standard cloud CLI tools (AWS CLI, npm, pip-audit, Snyk) for security hardening. All shell commands provided are transparent and serve the stated purpose of infrastructure auditing and dependency scanning.
- [METADATA_POISONING]: No deceptive metadata or prompt injection attempts were found. The instructions and scripts align with the skill's description as a security tool.
Audit Metadata