migration-to-aws
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [SAFE]: Implements comprehensive secret handling and redaction protocols. The discovery logic in
discover-iac.mdanddiscover-app-code.mdautomatically identifies and redacts sensitive patterns like passwords and API keys, and skips credential-heavy files like.envorcredentials.jsonentirely. - [SAFE]: Telemetry collection for the optional feedback phase is designed for privacy. The
feedback-trace.mdbuilder strictly filters out resource names, account IDs, and specific configuration values, producing a minified JSON object that the user must manually share. - [COMMAND_EXECUTION]: The skill instructs the agent to run common infrastructure and cloud CLI tools, including
terraform,aws,gcloud, anddocker, which are necessary for its primary function of planning and executing a cloud migration. - [SAFE]: Uses localized script execution for data processing tasks. For example,
discover.mdgenerates a local Python script for efficient billing data extraction, avoiding the need for remote code execution or pulling large raw data files into the model's immediate context.
Audit Metadata