hf-cloud-sagemaker-iam-preflight
Pass
Audited by Gen Agent Trust Hub on Jul 8, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- Automated AWS CLI Integration: The skill uses the
subprocessmodule to programmatically interact with theawsCLI. This allows the agent to perform cloud discovery and management tasks. The implementation uses list-based arguments for command execution, which is a secure practice to prevent shell injection. - IAM Resource Management: The skill is designed to manage high-privilege IAM resources, including actions like
iam:CreateRoleandiam:AttachRolePolicy. These capabilities are essential for the skill's stated purpose of preparing SageMaker environments. The scripts include logic to prefer existing roles over creating new ones, minimizing resource churn. - Cross-Platform Environment Handling: The logic is implemented in Python to ensure that AWS credentials and configurations are correctly inherited across different operating systems, specifically avoiding issues with environment isolation in terminal emulators on Windows.
Audit Metadata