aws-serverless
Pass
Audited by Gen Agent Trust Hub on Jul 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a technical reference for building AWS Serverless applications. It provides templates for AWS SAM and CDK that use standard managed policies (e.g., DynamoDBReadPolicy) and environment variables for configuration.
- [SAFE]: Includes a dedicated validation guide (
references/validation-checks.md) that warns users against security anti-patterns such as hardcoded credentials, secret keys in source code, and overly permissive IAM policies. - [EXTERNAL_DOWNLOADS]: The documentation references official AWS development tools and libraries, including the SAM CLI, AWS CDK, and official AWS SDKs for Node.js and Python. These are well-known services and do not pose a security risk in this context.
- [SAFE]: Code examples for Lambda handlers in Node.js and Python use standard structured logging and error handling as per AWS best practices.
Audit Metadata