Skills
Navigate
skills/datadog-labs/agent-skills/dd-aws-log-forwarding/Gen Agent Trust Hub

dd-aws-log-forwarding

Pass

Audited by Gen Agent Trust Hub on Nov 6, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches additional skill instructions and assets from the official Datadog Labs GitHub repository.
  • Evidence: The skill uses curl to download a tarball from https://codeload.github.com/datadog-labs/agent-skills/tar.gz/refs/heads/main to support hand-off workflows.
  • [DATA_EXPOSURE_&_EXFILTRATION]: Reads Datadog credentials from local configuration files and environment variables.
  • Evidence: Scripts scan .env and .env.local for DD_API_KEY and DD_APP_KEY. This follows standard secret management practices for local development environments.
  • [COMMAND_EXECUTION]: Executes Terraform and AWS CLI commands to provision infrastructure and manage secrets.
  • Evidence: The skill uses terraform apply to deploy Lambda functions and aws secretsmanager put-secret-value to securely seed API keys. Commands are constructed to avoid placing secrets in the process list by piping values via stdin.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 6, 2026, 03:41 PM