cloud-iam-privesc
Fail
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: HIGHPRIVILEGE_ESCALATIONCOMMAND_EXECUTION
Full Analysis
- [PRIVILEGE_ESCALATION]: The skill's primary purpose is to guide an agent through the process of escalating privileges from a low-privilege identity to an administrative level. It identifies specific IAM primitives that can be exploited, such as
iam:CreatePolicyVersionto grant*(full) permissions oriam:AttachUserPolicyto applyAdministratorAccess. It also describes techniques for usingiam:PassRolewith services like Lambda or EC2 to execute code under a more privileged role. - [COMMAND_EXECUTION]: The instructions direct the agent to execute a series of shell commands using cloud CLI tools (
aws,gcloud,az) and specialized security tools (pacu,enumerate-iam,scoutsuite) to enumerate effective permissions and execute the identified escalation paths.
Recommendations
- AI detected serious security threats
Audit Metadata