Skills
Navigate
skills/practicalswan/agent-skills/hf-cloud-aws-context-discovery/Gen Agent Trust Hub

hf-cloud-aws-context-discovery

Pass

Audited by Gen Agent Trust Hub on Sep 9, 2026

Risk Level: SAFECREDENTIALS_UNSAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [CREDENTIALS_UNSAFE]: Accesses local AWS credentials and configuration files (~/.aws/credentials and ~/.aws/config) to resolve the active profile and region. This is a core function of the skill and does not involve exfiltration.
  • [COMMAND_EXECUTION]: Uses the aws configure list and aws sts get-caller-identity commands to confirm effective settings and validate the caller's identity, which is standard practice for AWS discovery tools.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests data from local AWS configuration files to determine operational parameters.
  • Ingestion points: ~/.aws/config and ~/.aws/credentials (referenced in SKILL.md).
  • Boundary markers: None explicitly defined for INI parsing.
  • Capability inventory: Executes shell commands via the aws CLI (referenced in SKILL.md).
  • Sanitization: None specified for configuration values.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 9, 2026, 03:52 AM
Security Audit — agent-trust-hub — hf-cloud-aws-context-discovery