agents-connect
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFECREDENTIALS_UNSAFECOMMAND_EXECUTION
Full Analysis
- Credential Management Considerations: The skill provides guidance on managing API keys and OAuth secrets. While it shows CLI commands for adding credentials, it includes explicit security warnings against using flags that leak secrets into shell history, recommending interactive prompts or gitignored local environment files instead.
- Authentication Best Practices: The documentation strongly advocates for gateway-level authentication (2-legged and 3-legged OAuth, IAM, API keys) over hardcoding secrets in agent logic, which aligns with security best practices for credential isolation.
- Policy-Based Access Control: The skill facilitates the use of Cedar policies to enforce fine-grained access control on tool calls. It provides templates for role-based access and amount-based restrictions, which enhance the overall security posture of the agent's external interactions.
- Command Execution for Configuration: The skill utilizes standard AgentCore CLI commands (
agentcore add gateway,agentcore deploy, etc.) to manage infrastructure. These are administrative operations expected for the skill's primary purpose of infrastructure configuration.
Audit Metadata