aws-cdk-development
Pass
Audited by Gen Agent Trust Hub on Jul 2, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill allows execution of cdk, npm, and npx via Bash. These are required for its stated purpose of infrastructure development and package management.
- [EXTERNAL_DOWNLOADS]: The skill recommends installing cdk-nag via npm. This is a trusted security tool from the AWS community for auditing CDK stacks.
- [DATA_EXPOSURE]: The skill automatically checks the current AWS account identity before deployment using the aws sts get-caller-identity command. This is a security feature to help the user avoid accidental deployments to the wrong account.
- [INDIRECT_PROMPT_INJECTION]: The skill retrieves documentation and construct advice from MCP tools. While it lacks specific sanitization for this external data, it is a standard design for such integrated assistant tools. Ingestion points: Output from mcp__awsdocs__* and mcp__cdk__* tools. Boundary markers: None specified. Capability inventory: Bash shell execution for AWS resource management and package installation. Sanitization: None specified for tool outputs.
Audit Metadata