aws-profile-management
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION] (SAFE): The skill provides instructions for executing standard AWS CLI and Terraform commands (e.g.,
aws sts get-caller-identity,aws sso login,terraform workspace show). These commands are essential for the skill's primary purpose of infrastructure environment management. - [DATA_EXPOSURE] (SAFE): While the skill interacts with AWS credentials, it does so through local environment variables and official CLI tools. It does not contain hardcoded secrets or patterns for exfiltrating credentials to external domains.
- [DYNAMIC_EXECUTION] (SAFE): Uses
evalto export temporary credentials from the output ofaws sts assume-role. This is a common and accepted pattern for this specific administrative task. The dynamic command is constructed using a fixedawktemplate processing trusted output from the AWS CLI. - [INDIRECT_PROMPT_INJECTION] (LOW): The skill ingests data from local configuration files.
- Ingestion points: Reads
*.tffiles usinggrepto detect backend configurations. - Boundary markers: None present.
- Capability inventory: Subprocess execution of
awsandterraformcommands, andevalfor environment variable exports. - Sanitization: No specific sanitization of the
.tffile content is performed; however, thegrepsearch is narrow and specifically looks for infrastructure metadata.
Audit Metadata