conducting-cloud-penetration-testing

Pass

Audited by Gen Agent Trust Hub on Mar 15, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/agent.py uses subprocess.run to execute AWS CLI commands like aws iam list-users, aws ec2 describe-instances, and aws lambda get-function-configuration for environment enumeration.
  • [SAFE]: The skill includes explicit warnings and workflows for 'authorized testing only', defining boundaries based on the cloud provider's shared responsibility model.
  • [SAFE]: Potentially dangerous commands, such as those for disabling CloudTrail or creating backdoor users, are documented within a specific 'Persistence and Detection Evasion Testing' section which includes mandatory cleanup instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 15, 2026, 01:21 PM