aws-lambda-fleet-to-cloud-run
Pass
Audited by Gen Agent Trust Hub on Jul 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: Secure Parsing
- The
scripts/analyze_fleet.pyscript usesyaml.safe_load()for all YAML parsing tasks, effectively mitigating the risk of YAML-based remote code execution via unsafe deserialization. - [SAFE]: Secret Management
- The skill's documentation and example templates (
template.yaml) advocate for the use of AWS Secrets Manager and environment variables for sensitive data, avoiding hardcoded credentials. - [SAFE]: Static Analysis
- The core functionality relies on local file system scanning and regex pattern matching to generate a migration manifest. It does not perform network requests or execute external binaries.
- [SAFE]: Least Privilege
- The migration scripts and patterns focus on identifying resource dependencies and proposing architectural changes without requesting elevated privileges or modifying system persistence settings.
Audit Metadata