hf-cloud-aws-context-discovery
Pass
Audited by Gen Agent Trust Hub on Jul 8, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- AWS Configuration Access: The skill reads
~/.aws/configand~/.aws/credentialsto resolve the active profile and region. This is a standard procedure for tools interacting with the AWS CLI environment to ensure the correct context is used. - Identity Verification: It executes
aws sts get-caller-identityto confirm the validity of credentials and retrieve the account ID and ARN. This serves as a safety check to prevent failed deployments due to expired or incorrect credentials. - Environment Discovery: The skill inspects environment variables such as
AWS_PROFILEandAWS_REGIONto respect user-defined overrides, which is consistent with standard AWS CLI behavior. - SSO Awareness: The skill includes logic to detect SSO-based authentication and proactively inform the user about potential IAM permission limitations (like role creation), which helps prevent unexpected runtime errors.
Audit Metadata