cognito
Pass
Audited by Gen Agent Trust Hub on Jun 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists of documentation, CLI examples, and Python snippets for AWS Cognito. Analysis of the instructions and code did not reveal any malicious patterns, obfuscation, or unauthorized data exfiltration.
- [EXTERNAL_DOWNLOADS]: The skill mentions standard third-party Python libraries for authentication and AWS service interaction, specifically 'boto3', 'requests', 'python-jose', 'PyJWT', and 'warrant'.
- [CREDENTIALS_UNSAFE]: The code snippets correctly demonstrate the use of environment variables ('os.environ') for sensitive parameters such as 'COGNITO_CLIENT_SECRET' and 'COGNITO_INITIAL_PASSWORD', which is a recommended security practice to avoid hardcoding credentials.
Audit Metadata