deploy-ec2-aws
Pass
Audited by Gen Agent Trust Hub on Jul 31, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill incorporates security best practices for AWS deployments, such as enforcing encrypted EBS root volumes and requiring IMDSv2 (Session Tokens) for EC2 metadata access.\n- [SAFE]: Network security is prioritized by defaulting to a dedicated VPC and restricting SSH ingress to the operator's specific IP address rather than allowing global access.\n- [SAFE]: The project scaffolding script (scaffold_project.py) uses strict regular expression validation for user-supplied inputs and employs shell quoting (shlex.quote) when generating the project's README to prevent command injection.\n- [EXTERNAL_DOWNLOADS]: Fetches the operator's public IPv4 address from Amazon's well-known service (checkip.amazonaws.com) to automatically populate security group ingress rules.
Audit Metadata