amazon-dynamodb
Pass
Audited by Gen Agent Trust Hub on Aug 21, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- Automated Resource Management: The skill automates the creation of DynamoDB tables, IAM roles, and Lambda functions for performance benchmarking. It employs several safety layers, including account name validation to prevent accidental production deployments and explicit consent requirements for creating billable resources.
- Orchestration via Subprocesses: The iteration logic uses standard Python sub-processes to call its own internal tools for cost estimation and report generation. These calls use absolute paths and fixed command structures, which are used within the skill's intended functionality.
- Least Privilege Security Posture: IAM policies generated by the tool are restricted using resource prefixes, ensuring the temporary benchmarking environment has minimal access to the broader AWS account.
- Transparent Teardown Process: The skill provides a clear path for cleaning up AWS resources by generating a reviewable shell script, requiring user confirmation before any destructive actions are taken.
Audit Metadata