cloud-security-scoutsuite
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the
scoutCLI tool to perform cloud configuration scans. These commands includescout aws,scout azure, andscout gcp. This is the core functionality of the security auditing skill. - [INDIRECT_PROMPT_INJECTION]: The skill parses JSON output generated by the scanner to summarize findings.
- Ingestion points: Reads files from the
./scoutsuite-resultsdirectory (SKILL.md). - Boundary markers: None identified in the prompt templates.
- Capability inventory: File-system read and terminal output formatting.
- Sanitization: Not explicitly mentioned for the parsed JSON content.
- [EXTERNAL_DOWNLOADS]: The instructions recommend installing the
scoutsuitepackage viapip. ScoutSuite is an established open-source security tool maintained by NCC Group.
Audit Metadata