ministack-aws-emulator

Fail

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: HIGHEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the installation of the 'ministack' package from PyPI and a Docker image from the 'nahuelnucera/ministack' repository on Docker Hub. Additionally, it clones a repository from 'https://github.com/Nahuel990/ministack'. These sources are maintained by individuals and are not recognized as trusted organizations.\n- [COMMAND_EXECUTION]: The skill uses command-line operations to install and run the emulator, including 'pip install', 'docker run', and manual execution of the 'bin/awslocal' script after modifying its permissions with 'chmod +x'.\n- [DYNAMIC_EXECUTION]: The skill demonstrates the creation and invocation of Lambda functions by packaging Python code into a ZIP file at runtime and executing it through the emulator's 'create_function' and 'invoke' APIs.\n- [INDIRECT_PROMPT_INJECTION]: The skill creates a surface for indirect prompt injection as it processes external data. 1. Ingestion points: The emulator ingests data through S3 object uploads, DynamoDB table items, and SQS message bodies. 2. Boundary markers: No markers or 'ignore' instructions are used when processing this data. 3. Capability inventory: The skill can execute shell commands, install packages, and run dynamic Lambda code. 4. Sanitization: No sanitization or validation of the ingested data is evident before it is used in operations.
Recommendations
  • AI detected serious security threats
Audit Metadata
Risk Level
HIGH
Analyzed
Sep 14, 2026, 10:36 AM