aws-architecture-diagram
Pass
Audited by Gen Agent Trust Hub on May 10, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: Downloads and executes the
awslabs.aws-diagram-mcp-serverpackage using theuvxrunner. This package is maintained by AWS Labs, a well-known and trusted organization. - [COMMAND_EXECUTION]: Executes shell commands to launch the MCP server and requires the system to have
graphvizinstalled to process DOT files into visual formats like PNG and SVG. - [CREDENTIALS_UNSAFE]: Utilizes standard AWS environment variables (
AWS_ACCESS_KEY_ID,AWS_SECRET_ACCESS_KEY) for authentication. This is an expected and standard requirement for tools that interact with the AWS API. - [DATA_EXFILTRATION]: Performs read-only discovery of AWS infrastructure (VPCs, subnets, route tables) to construct architectural diagrams. This data access is necessary for the skill's primary function and remains within the execution context.
Audit Metadata