aws-ses
Pass
Audited by Gen Agent Trust Hub on Jun 17, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references official AWS SDKs including 'boto3' for Python, '@aws-sdk/client-sesv2' for Node.js, and 'software.amazon.awssdk:sesv2' for Java. All documentation links point to official AWS domains (docs.aws.amazon.com).
- [CREDENTIALS_UNSAFE]: Code examples correctly use placeholders (e.g., 'YOUR_SMTP_USERNAME') for sensitive information. The documentation provides explicit guidance on using IAM roles and environment variables instead of hardcoding credentials, and notes the importance of storing SMTP passwords in secret management systems.
- [COMMAND_EXECUTION]: The skill describes utility scripts in the 'scripts/' directory for tasks like sending email, verifying domains, and setting up configuration sets. These scripts are intended for automation and use standard AWS SDK patterns.
- [DATA_EXFILTRATION]: Network operations are confined to official AWS service endpoints (e.g., email-smtp.us-east-1.amazonaws.com) for the purpose of sending email and managing service resources.
- [SAFE]: The skill includes extensive security-positive guidance, such as implementing DKIM/SPF/DMARC authentication, using configuration sets for observability, and isolating workloads with tenants to protect sender reputation.
Audit Metadata