syncing-aidlc-workflows
Pass
Audited by Gen Agent Trust Hub on Jun 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches workflow assets and source code from the official AWS Labs repository (github.com/awslabs/aidlc-workflows) using git or curl.
- [REMOTE_CODE_EXECUTION]: When the 'kiro' tool is selected, the skill executes a build script ('node build/kiro-ide/build.js') within a temporary clone of the fetched repository to generate the final artifacts for import.
- [COMMAND_EXECUTION]: Orchestrates the synchronization process using local shell scripts (lib/*.sh) and standard system utilities including git, jq, and node.
- [SAFE]: The skill handles configuration files carefully, specifically normalizing 'settings.json' to remove environment-specific or sensitive fields before they are imported into the local project. All network operations are directed to well-known GitHub domains.
Audit Metadata