managing-amazon-msk
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFE
Full Analysis
- [Internal Logic and Sizing Tool]: The skill includes a utility script,
scripts/msk_sizing.py, which is used for cluster sizing and cost estimation. Analysis shows the script relies exclusively on standard Python library modules and contains no network, file system, or dynamic execution capabilities. It includes input validation logic to ensure that user-provided sizing parameters are handled predictably. - [Credential and Secret Management]: The documentation provided in the skill (e.g., in
configure-clients.md) correctly advises users to store credentials in AWS Secrets Manager rather than in configuration files. The examples use placeholders for sensitive values, which is a standard safety practice to prevent accidental hardcoding of credentials. - [IAM Policy Templates]: The skill provides IAM policy examples for MSK service roles. These policies are well-scoped to the necessary actions for MSK data delivery and utilize placeholders for resource ARNs, ensuring that access is restricted to user-defined buckets and catalogs.
- [Service-Level Configuration]: The documentation uses template patterns like
!{sequence-number}for MSK Data Delivery and{broker_id}for MSK configuration. These are correctly identified as MSK service configuration syntax and do not introduce risks such as dynamic context injection into the AI agent environment. - [Resource Integrity]: All external references and downloads link to official AWS documentation and well-known service repositories, aligning with the [TRUST-SCOPE-RULE] for trusted vendor content.
Audit Metadata