localstack-iam

Pass

Audited by Gen Agent Trust Hub on Oct 9, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides documentation for managing LocalStack IAM features using official CLI tools (lstk and localstack). All external resources, including references to the localstack CLI and domains, originate from the vendor's known ecosystem.
  • [COMMAND_EXECUTION]: The skill includes shell commands for environment configuration and AWS CLI operations (e.g., lstk start, lstk aws iam create-user). These are standard operational commands for the tool's intended purpose in a local development environment.
  • [EXTERNAL_DOWNLOADS]: The instructions mention installing the legacy localstack CLI via pip install localstack. This is a well-known package from a known vendor and does not present a security risk in this context.
  • [CREDENTIALS_SAFE]: The skill mentions the LOCALSTACK_AUTH_TOKEN environment variable and AWS ARN formats (e.g., 000000000000), but does not contain hardcoded secrets or sensitive credentials. It correctly references standard practices for CI/CD authentication.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 9, 2026, 05:37 AM