aws-social-messaging
Pass
Audited by Gen Agent Trust Hub on Aug 10, 2026
Risk Level: SAFE
Full Analysis
- Standard AWS CLI Integration: The skill provides instructions for using the official AWS Command Line Interface (CLI) to manage social messaging resources. This is a standard and secure method for programmatic interaction with AWS services.
- IAM Role and Permission Management: The skill specifies the necessary IAM permissions for operations, including the
iam:PassRoleaction required for service-to-service communication. This action allows the Social Messaging service to interact with other AWS resources like SNS. While broad permissions can be a concern, the skill correctly emphasizes the use of least-privilege policies and resource-level scoping to minimize security risks. - Data Encoding for API Requirements: The instructions specify Base64 encoding for certain parameters such as message definitions. This is a documented technical requirement for the AWS CLI to handle 'blob' data types. While encoding can sometimes be used to hide intent, in this context it is a functional necessity for service compatibility and is not intended for obfuscation.
- Security Controls for Sensitive Data: The skill handles PII, such as recipient phone numbers, and provides clear guidance on protecting this data through SNS encryption (KMS), secure transport (HTTPS), and CloudTrail log protection. It also advises using media IDs instead of public URLs for sensitive content. This approach addresses the potential concern of data exposure by ensuring that sensitive message content and metadata are encrypted and handled through authorized channels.
Audit Metadata