aws-lc
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches the AWS-LC source code from
https://github.com/aws/aws-lc.git. This is the official repository for the library. - [DYNAMIC_EXECUTION]: The skill provides C source code templates (
smoke.c,provider-smoke.c) and instructions to compile and run them locally using CMake and system compilers to validate the build and integration process. - [COMMAND_EXECUTION]: The workflow requires the use of several system tools including
cmake,git,ninja,go, andperlto manage source code, generate assembly code, and execute tests. - [INDIRECT_PROMPT_INJECTION]: As a developer tool for library integration, the skill ingests data from external source repositories and local project configurations, creating a surface where malicious instructions could potentially be embedded in the code being integrated.
- Ingestion points: External AWS-LC source repository and local project build files.
- Boundary markers: The skill advocates for the use of private installation prefixes and disposable probe directories to isolate validation tasks.
- Capability inventory: File system writing (via
cmake --install), network access (viagit clone), and binary execution (viacmakeand the compiled smoke tests). - Sanitization: The skill relies on the integrity of the official source repository and does not explicitly implement data sanitization for the integrated code.
Audit Metadata