localstack-iam
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation for managing LocalStack IAM features using official CLI tools (
lstkandlocalstack). All external resources, including references to thelocalstackCLI and domains, originate from the vendor's known ecosystem. - [COMMAND_EXECUTION]: The skill includes shell commands for environment configuration and AWS CLI operations (e.g.,
lstk start,lstk aws iam create-user). These are standard operational commands for the tool's intended purpose in a local development environment. - [EXTERNAL_DOWNLOADS]: The instructions mention installing the legacy
localstackCLI viapip install localstack. This is a well-known package from a known vendor and does not present a security risk in this context. - [CREDENTIALS_SAFE]: The skill mentions the
LOCALSTACK_AUTH_TOKENenvironment variable and AWS ARN formats (e.g.,000000000000), but does not contain hardcoded secrets or sensitive credentials. It correctly references standard practices for CI/CD authentication.
Audit Metadata