iac-security
Pass
Audited by Gen Agent Trust Hub on Jul 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security risks were identified. The skill is a defensive tool that adheres to security best practices.
- [PROMPT_INJECTION]: The skill proactively addresses indirect prompt injection risks associated with processing untrusted IaC templates. It includes a specific safety notice that acts as a boundary marker, instructing the agent to treat all file content (string values, comments, descriptions) as data rather than instructions. It further sanitizes the input by directing the agent to ignore and report scanner suppression comments (e.g., '# checkov:skip') rather than following them.
- [DATA_EXFILTRATION]: No network-enabled tools are allowed or used. Access is restricted to reading and searching local configuration files using 'Read', 'Grep', and 'Glob'. There are no attempts to access sensitive system paths or exfiltrate discovered data.
- [REMOTE_CODE_EXECUTION]: The skill does not install external packages, download remote scripts, or utilize dynamic code execution patterns. All analysis logic is defined statically within the skill's documentation and instructions.
Audit Metadata