aws-cdk
Pass
Audited by Gen Agent Trust Hub on May 14, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- Standard Command Execution: The skill includes various commands for the AWS CLI, CDK CLI, and standard package managers (npm, pip). These are used for routine tasks such as project initialization, synthesis of CloudFormation templates, and stack deployment.
- Dependency Management: Instructions guide users to install well-known libraries such as
aws-cdk-lib,constructs, andcdk-nagfrom official registries. It recommends pinning versions to ensure build reproducibility and security. - Credential Diagnostics: The reference materials provide standard troubleshooting steps for AWS authentication issues, referencing tools like
aws sts get-caller-identityand describing common configuration file locations such as~/.aws/credentials. - Security and Compliance Integration: The skill encourages the use of
cdk-nagfor policy enforcement and AWS CloudFormation drift detection to monitor for unauthorized changes to resources after deployment. - Input Processing Considerations: As a development tool, the skill processes infrastructure-as-code files and environment variables. To manage potential configuration risks, it promotes the use of
--strictmode and automated compliance scanning during the synthesis process.
Audit Metadata