aws-blocks
Pass
Audited by Gen Agent Trust Hub on Jul 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs users to use
npx @aws-blocks/create-blocks-appto scaffold new projects, which fetches the scaffolding tool from the public npm registry. - [COMMAND_EXECUTION]: The skill provides standard development commands for initialization, environment management, and deployment, such as
npx @aws-blocks/create-blocks-app,npm run sandbox, andnpm run deploy. - [SAFE]: The skill demonstrates strong security awareness by explicitly instructing developers on best practices:
- Recommending
auth.requireAuth(context)for access control. - Using
AppSettingwith{ secret: true }for credential management instead of hardcoding or using.envfiles. - Enforcing least-privilege IAM policies.
- Warning about log sanitization to prevent accidental disclosure of tokens or secrets.
Audit Metadata