detecting-serverless-function-injection
detecting-serverless-function-injection is an Application security skill for AI agents, published by 26zl in the cybersec-toolkit repository on GitHub. Skillspace rates detecting-serverless-function-injection F (15/100) and the safety scan rated it unsafe; the rating is based on static analysis only.
Unsafe. This skill has patterns associated with malicious or dangerous behaviour. We do not recommend running it.
Detects and prevents code injection attacks targeting serverless functions (AWS Lambda, Azure Functions, Google Cloud Functions) through event source poisoning, malicious layer injection, runtime command execution, and IAM privilege escalation via function modification. The analyst combines static analysis of function code, CloudTrail event correlation, runtime behavior monitoring, and IAM policy auditing to identify injection vectors across the expanded serverless attack surface including API Gateway, S3, SQS, DynamoDB Streams, and CloudWatch event triggers. Activates for requests involving Lambda security assessment, serverless injection detection, function event poisoning analysis, or serverless privilege escalation investigation.
- Grade
- F
- Quality
- 15 / 100
- Safety
- Unsafe
- GitHub stars
- 28
Unproven: rated by static analysis only, not yet compared head-to-head.
Our two independent classifiers differ on this skill's category, so treat the placement as provisional.
This rating describes the version of the repository we crawled; it may have changed since.
Our review
- Architecture
- 94 / 100
- Maturity
- Packaged: licensed, with a version or references
- Security scan
- Critical-risk patterns
- License
- MIT
- Adoption
- Adopted by 0 other repositories, in 19 collections
What the scanner flagged
- pipe remote script to shell
- exfiltration language
- references sensitive credential env
- executes shell/subprocess
- dynamic code execution (eval/exec)
- mentions secrets in text
Not checked yet
- Not judged on the rubric yet (not a contender in its category)
- No blind task eval yet
- Scope (portable / vendor / repo-internal) not assessed; only the top of each category is read for scope
- Sibling files (scripts, references) not fetched; security scan covers SKILL.md only
Skillspace indexes and rates this skill; it does not host or endorse it. Run third-party skills at your own risk.