skills/mukul975/anthropic-cybersecurity-skills/conducting-cloud-infrastructure-penetration-test/Gen Agent Trust Hub
conducting-cloud-infrastructure-penetration-test
Pass
Audited by Gen Agent Trust Hub on Mar 15, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The Python scripts
scripts/agent.pyandscripts/process.pyexecute system commands viasubprocess.runto interface with the AWS CLI and ScoutSuite. These calls use argument lists, which prevents shell injection. - [EXTERNAL_DOWNLOADS]: The skill references standard security tooling and libraries such as
boto3,ScoutSuite,Pacu, andProwler. All references point to legitimate industry tools and are documented for user installation. - [DATA_EXFILTRATION]: The skill includes instructions and scripts for accessing sensitive cloud metadata (via the EC2 instance metadata service at 169.254.169.254) and enumerating IAM permissions and storage bucket ACLs. These capabilities are intended for security auditing and do not perform unauthorized data transmission.
Audit Metadata