multi-cloud-catalog
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill consists entirely of static Markdown documentation and YAML configuration files providing reference data for cloud services. All information provided is consistent with its stated purpose as a research tool for cloud component facts.
- [NO_CODE]: No binary executables or scripts (Bash, Python, JavaScript) are distributed within the skill. It relies on standard information retrieval via file system reads and ripgrep searches.
- [PROMPT_INJECTION]: The skill instructions in SKILL.md are designed to improve response grounding by mandating that the agent read facts from the reference pack instead of relying on training memory. No attempts to bypass safety filters or override agent constraints were found.
- [DATA_EXPOSURE_AND_EXFILTRATION]: No hardcoded credentials or sensitive internal data were identified. Architectural examples in the patterns and guides use standard secret placeholders like $secret/slug, which follow the vendor's documented safety practices for secret management.
- [EXTERNAL_DOWNLOADS]: Reference URLs within the pricing files point to official, well-known cloud provider pricing documents (e.g., pricing.us-east-1.amazonaws.com and prices.azure.com), which are used for data verification and do not involve executable code downloads.
Audit Metadata