skills/mukul975/anthropic-cybersecurity-skills/auditing-cloud-with-cis-benchmarks/Gen Agent Trust Hub
auditing-cloud-with-cis-benchmarks
Pass
Audited by Gen Agent Trust Hub on Apr 13, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill provides legitimate instructions for cloud security auditing using industry-standard CIS benchmarks. The stated purpose aligns with the actual functionality provided in the documentation and scripts.
- [COMMAND_EXECUTION]: The workflow includes shell commands for executing auditing tools (Prowler, ScoutSuite) and performing administrative remediation tasks via the AWS CLI (e.g., 'aws iam delete-access-key', 'aws s3api put-bucket-encryption'). These actions are standard for the described security audit and remediation workflow.
- [SAFE]: The included Python script ('scripts/agent.py') uses the official 'boto3' library to collect security-related configuration metadata from an AWS account (e.g., IAM settings, S3 encryption status). The data is processed locally to generate a compliance report, and no unauthorized network exfiltration was detected.
- [SAFE]: The skill references established, well-known security tools (Prowler, ScoutSuite) and provides links to their official documentation and repositories. The usage patterns described are consistent with official guidelines.
Audit Metadata