aws-cloudfront-cdn
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill documents standard AWS CLI commands (e.g.,
aws cloudfront create-distribution) and shell scripts (validate-config.sh) for managing infrastructure. These are static examples for user reference and do not perform autonomous execution of high-risk actions. - [REMOTE_CODE_EXECUTION]: The skill uses the official Hashicorp AWS provider in Terraform (
source = "hashicorp/aws"). Per the [TRUST-SCOPE-RULE], this is a well-known service and is considered safe. - [CREDENTIALS_UNSAFE]: The documentation references placeholder ARNs and IDs (e.g.,
arn:aws:wafv2:us-east-1:123456789012:...,ABCDEFG12345). No real secrets or sensitive credentials are hardcoded. - [DATA_EXFILTRATION]: No network exfiltration patterns were detected. The skill focuses on outbound infrastructure configuration rather than data processing or exfiltration.
- [SAFE]: The skill follows security best practices by recommending the use of Origin Access Identity (OAI), HTTPS-only policies, and WAF integration.
Audit Metadata