aws-ec2-setup
Pass
Audited by Gen Agent Trust Hub on Feb 15, 2026
Risk Level: LOWCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
- COMMAND_EXECUTION (LOW): The skill directs the agent to execute a series of infrastructure management commands using the AWS CLI and Terraform. This includes creating security groups, IAM roles, and launching EC2 instances. While these are the stated goals of the skill, they require significant administrative permissions in the user's AWS environment.
- EXTERNAL_DOWNLOADS (LOW): The provided user-data script downloads the CloudWatch agent from
s3.amazonaws.comand clones a repository fromgithub.com. Since these are recognized as trusted sources per the security guidelines, the severity of these downloads is downgraded to LOW. - DATA_EXFILTRATION (LOW): The Terraform configuration (
ec2.tf) attempts to read the user's public SSH key from~/.ssh/id_rsa.pub. While public keys are meant to be shared, accessing the.sshdirectory is a sensitive operation that warrants caution. - PRIVILEGE_MANAGEMENT (INFO): The skill creates IAM roles and security groups. Specifically, it opens ports 80 and 443 to the entire internet (
0.0.0.0/0). This is standard for web servers but increases the attack surface of the provisioned infrastructure.
Audit Metadata