skills/mukul975/anthropic-cybersecurity-skills/implementing-cloud-vulnerability-posture-management/Gen Agent Trust Hub
implementing-cloud-vulnerability-posture-management
Pass
Audited by Gen Agent Trust Hub on Apr 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The scripts
scripts/agent.pyandscripts/process.pyprogrammatically execute security scanners via thesubprocessmodule. These calls use argument lists rather than shell strings, effectively mitigating command injection risks. - [EXTERNAL_DOWNLOADS]: The skill documents and utilizes reputable third-party dependencies, including
boto3,azure-identity,prowler, andscoutsuite. These tools are industry standards for cloud auditing and are obtained from official registries. - [SAFE]: No evidence of malicious behavior such as data exfiltration, credential theft, or unauthorized persistence was found. The skill operates within its stated domain of cloud vulnerability management.
- [PROMPT_INJECTION]: The skill exhibits a surface for indirect prompt injection by parsing output from external tools. Ingestion point:
scripts/process.pyparsing logic. Boundary markers: None. Capability inventory: Subprocess execution and report generation. Sanitization: Uses standard JSON parsing without additional content filtering.
Audit Metadata