aws-best-practices
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides comprehensive best practice documentation for AWS Lambda, RDS, SSM, SQS, and SAM templates. It correctly emphasizes security principles such as using
SecureStringfor secrets and fetching credentials at runtime rather than hardcoding them or baking them into environment variables at deploy-time. The provided Python utility scripts (shared_layer/) and CloudFormation templates (templates/) follow standard AWS development patterns and do not contain any command execution, data exfiltration, or obfuscation attempts. The instruction to usejson.loads(os.environ.get("LAMBDA_ENV_VARS", "{}"))is a documented pattern for handling complex configuration in nested templates and does not introduce injection risks in this context.
Audit Metadata