skills/trancee/skills/aws-lc/Gen Agent Trust Hub

aws-lc

Pass

Audited by Gen Agent Trust Hub on Nov 1, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill fetches the AWS-LC source code from https://github.com/aws/aws-lc.git. This is the official repository for the library.
  • [DYNAMIC_EXECUTION]: The skill provides C source code templates (smoke.c, provider-smoke.c) and instructions to compile and run them locally using CMake and system compilers to validate the build and integration process.
  • [COMMAND_EXECUTION]: The workflow requires the use of several system tools including cmake, git, ninja, go, and perl to manage source code, generate assembly code, and execute tests.
  • [INDIRECT_PROMPT_INJECTION]: As a developer tool for library integration, the skill ingests data from external source repositories and local project configurations, creating a surface where malicious instructions could potentially be embedded in the code being integrated.
  • Ingestion points: External AWS-LC source repository and local project build files.
  • Boundary markers: The skill advocates for the use of private installation prefixes and disposable probe directories to isolate validation tasks.
  • Capability inventory: File system writing (via cmake --install), network access (via git clone), and binary execution (via cmake and the compiled smoke tests).
  • Sanitization: The skill relies on the integrity of the official source repository and does not explicitly implement data sanitization for the integrated code.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 1, 2026, 01:14 PM