aws-cdk
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill consists of high-quality documentation and reference guides for AWS CDK development. It advocates for security best practices, including OIDC for CI/CD credentials, the use of permissions boundaries, and resource protection strategies.
- [COMMAND_EXECUTION]: The documentation provides guidance on using standard developer tools such as the AWS CDK CLI, npm, and pip. These commands (e.g.,
cdk deploy,cdk bootstrap) are legitimate and necessary for infrastructure-as-code workflows. - [INDIRECT_PROMPT_INJECTION]: The skill documentation addresses the processing of infrastructure-as-code files. While this creates an entry point for external data to influence the agent's context, the skill mitigates this risk by explicitly instructing the use of compliance-checking tools like
cdk-nagto validate resources before deployment.
Audit Metadata