hf-cloud-sagemaker-iam-preflight
Pass
Audited by Gen Agent Trust Hub on Aug 15, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The scripts
scripts/check_role.pyandscripts/create_role.pyexecute the localawsCLI binary using the Pythonsubprocess.runfunction. The scripts pass arguments as a list rather than a single string, which is a security best practice that prevents shell injection attacks. - [PRIVILEGE_ESCALATION]: The skill is designed to perform IAM operations, including
iam:CreateRole,iam:AttachRolePolicy, andiam:PutRolePolicy. While these are high-privilege actions, they are the primary and intended purpose of the skill to configure SageMaker environments. The skill includes warnings for SSO users who may lack these permissions. - [INDIRECT_PROMPT_INJECTION]: The skill accepts user-supplied strings for role names and bucket names which are then used in shell commands.
- Ingestion points: Command-line arguments in
scripts/check_role.pyandscripts/create_role.pypassed to subprocess. - Boundary markers: None present.
- Capability inventory: Execution of
aws iamcommands viasubprocess.runto manage IAM resources. - Sanitization: No explicit string sanitization is performed, though the use of list-based arguments for
subprocess.runprevents direct shell command injection.
Audit Metadata