securing-aws-iam-permissions
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's instructions and provided code snippets are consistent with industry-standard AWS security practices for cloud identity management.
- [COMMAND_EXECUTION]: Includes legitimate AWS CLI commands (e.g.,
aws iam,aws accessanalyzer,aws organizations) used for auditing and remediation. These commands require the user to have pre-configured administrative credentials in their environment. - [DATA_EXFILTRATION]: No network operations or data exfiltration patterns were identified. The skill generates a local IAM credential report (
iam-report.csv) but does not attempt to send this or any other data to remote servers. - [PROMPT_INJECTION]: The content does not contain instructions designed to override agent behavior, bypass safety filters, or reveal system prompts.
- [OBFUSCATION]: The use of
base64 -din the CLI script is a functional requirement to decode AWS credential reports, which are natively returned in Base64 format by the API. It is not used to hide malicious intent.
Audit Metadata