aws-serverless
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a reference guide for AWS Serverless architectures, covering Lambda, API Gateway, Step Functions, and EventBridge.\n- [COMMAND_EXECUTION]: Provides standard AWS CLI commands for querying service quotas and function configurations (e.g.,
aws service-quotas get-service-quota). These are documented for diagnostic purposes and follow official AWS recommendations for infrastructure management.\n- [EXTERNAL_DOWNLOADS]: References official AWS documentation and recommends theaws-lambda-powertoolslibrary. As this library is maintained by a well-known service provider (AWS), it is considered a safe and standard dependency for the intended use case.\n- [CREDENTIALS_UNSAFE]: The skill correctly advises against storing secrets in environment variables and recommends using AWS Secrets Manager or Systems Manager Parameter Store with proper caching, which aligns with security best practices.\n- [SAFE]: No obfuscation, persistence mechanisms, or privilege escalation patterns were detected. The boilerplate code provided inassets/powertools-handler.pyis a standard, safe implementation of the Powertools library.
Audit Metadata