ecs-soci
Pass
Audited by Gen Agent Trust Hub on Jul 23, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The generated build script resolves and downloads the SOCI binary from the official awslabs/soci-snapshotter repository on GitHub.
- [EXTERNAL_DOWNLOADS]: The Dockerfile and FastAPI application download pre-trained model weights from HuggingFace to enable deterministic inference testing.
- [COMMAND_EXECUTION]: The skill generates shell scripts for automating Docker builds, ECR image pushes, and ECS task execution comparison, providing clear visibility into the commands being run.
- [CREDENTIALS_UNSAFE]: Infrastructure configuration correctly utilizes Terraform variables for AWS account IDs and IAM role ARNs, avoiding hardcoded secrets and following standard practice for AWS environment setup.
Audit Metadata