aws-blocks

Pass

Audited by Gen Agent Trust Hub on Jul 24, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs users to use npx @aws-blocks/create-blocks-app to scaffold new projects, which fetches the scaffolding tool from the public npm registry.
  • [COMMAND_EXECUTION]: The skill provides standard development commands for initialization, environment management, and deployment, such as npx @aws-blocks/create-blocks-app, npm run sandbox, and npm run deploy.
  • [SAFE]: The skill demonstrates strong security awareness by explicitly instructing developers on best practices:
  • Recommending auth.requireAuth(context) for access control.
  • Using AppSetting with { secret: true } for credential management instead of hardcoding or using .env files.
  • Enforcing least-privilege IAM policies.
  • Warning about log sanitization to prevent accidental disclosure of tokens or secrets.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 24, 2026, 03:51 PM
Security Audit — agent-trust-hub — aws-blocks