coding-cdk-ts
Pass
Audited by Gen Agent Trust Hub on May 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements strong security boundaries. It explicitly instructs the agent to treat output from external commands (like
npm view) as untrusted data and to only extract specific version strings, preventing potential indirect prompt injection from package registries.\n- [COMMAND_EXECUTION]: Uses standard development tools includingnpm,cdk, andaws clifor legitimate project management tasks such as dependency installation, testing, deployment, and authentication with AWS CodeArtifact. All commands are contextually appropriate for AWS CDK development.\n- [EXTERNAL_DOWNLOADS]: References official package registries (NPM) and AWS services (CodeArtifact) for dependency management. These are recognized as standard, well-known services for the intended use case.
Audit Metadata