agentcore-ops-review
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [Standard Service Discovery]: The skill performs inventory and health assessments using read-only AWS service actions. It identifies configuration patterns like subnet placement and resource activity to provide operational recommendations, aligning with its documented purpose.
- [Managed Data-Plane Interaction]: The skill includes a procedure to count records in long-term memory using the "bedrock-agentcore:ListMemoryRecords" API. The instructions include specific guidance for the agent to process only metadata (the count) rather than sensitive content, providing a balance between operational visibility and data privacy. This capability is optional and can be managed through the provided IAM policy templates.
- [Telemetry-Based Assessment]: The skill leverages existing CloudWatch metrics to analyze runtime performance and resource utilization. This approach allows for non-intrusive monitoring of workload health and cost-efficiency without modifying the underlying AWS resources.
Audit Metadata