ec2-backend-deployer
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONPRIVILEGE_ESCALATIONPERSISTENCE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The guide includes commands to fetch and execute official installation scripts from well-known services, specifically for installing Docker (get.docker.com) and Tailscale (tailscale.com). These are standard setup procedures for the target EC2 environment.
- [COMMAND_EXECUTION]: Employs shell commands to automate project context discovery (e.g., identifying frameworks and versions via package.json) and to execute remote deployment operations.
- [INDIRECT_PROMPT_INJECTION]: The skill identifies ingestion points in local project files such as package.json and .nvmrc to determine build requirements. While it lacks explicit boundary markers or sanitization for these inputs, the risk is minimized by the context of a development environment. The capability inventory includes remote command execution via SSH and Docker orchestration.
- [PRIVILEGE_ESCALATION]: Utilizes sudo for administrative tasks on the EC2 instance, such as installing system dependencies and configuring user permissions for the Docker daemon.
- [PERSISTENCE]: Includes instructions for configuring a system cron job to perform routine Docker image and container cleanup on the deployment host.
Audit Metadata