health-check
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local shell script
scripts/check-health.shto perform health checks. The script uses standard AWS CLI commands (aws cloudwatch,aws eks,aws rds,aws elbv2) and local utilities (jq,bc,sed) to process metric data. The inputs are restricted to standard account IDs and region identifiers. - [EXTERNAL_DOWNLOADS]: The skill documentation mentions downloading or fetching configuration from known repositories, specifically referencing its own internal structure for SLO targets and metric definitions. It does not perform unverified remote script execution.
- [SAFE]: The skill follows least-privilege principles by focusing on read-only metric gathering (
get-metric-data,describe-alarms). It encourages the use of local, environment-specific configuration files (slo-targets.local.yaml) for sensitive goal-setting, which is a security best practice for avoiding hardcoded secrets in version control.
Audit Metadata