triage-leaked-infra
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses various
awsCLI commands (EC2, S3, IAM, Route53) to inspect resource tags, state, and metadata. These operations are read-only (describe,list,head-object) and intended for infrastructure auditing, which aligns with the skill's stated purpose. - [DATA_EXPOSURE]: While the skill accesses AWS infrastructure details (VPC IDs, Instance IDs, IAM Role names), it does so to present a triage report to the user within the CI context. No sensitive credentials or private data exfiltration patterns were detected.
- [TRUSTED_SOURCE]: All resource patterns and domains (openshift.com, aws commands) are consistent with the author 'openshift' and standard cloud provider operations.
Audit Metadata