skills/aws-samples/sample-claude-code-plugins-for-startups/migration-apprunner-to-ecs-express/Gen Agent Trust Hub
migration-apprunner-to-ecs-express
Pass
Audited by Gen Agent Trust Hub on Jul 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a robust security model where the agent performs read operations to discover configuration, while all write and destructive actions (creating IAM roles, deploying services, deleting resources) are presented as commands for the user to manually review and execute.
- [EXTERNAL_DOWNLOADS]: Recommends setting up an MCP server using the
mcp-proxy-for-awspackage from standard registries to interface with official AWS regional endpoints. - [COMMAND_EXECUTION]: Generates AWS CLI v2 commands for managing infrastructure. These commands are constructed based on live data retrieved via MCP tools, and the skill includes specific anti-patterns to avoid hardcoding potentially stale API parameters.
- [SAFE]: Incorporates a 'Quick Migrate' eligibility check that prevents automated paths for high-traffic or production-critical services, enforcing a full manual workflow for complex environments.
Audit Metadata