aws-cdk
Pass
Audited by Gen Agent Trust Hub on Jul 24, 2026
Risk Level: SAFENO_CODECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill is entirely documentation-based, providing technical guidance for AWS CDK development using TypeScript and Python. It promotes industry-standard security best practices, such as using OIDC for CI/CD, applying compliance rule packs with cdk-nag, and enabling termination protection on stateful resources.
- [NO_CODE]: No executable scripts (.sh, .py, .js) are distributed with the skill. All instructions are provided in Markdown format for the agent to use as a reference.
- [COMMAND_EXECUTION]: The skill describes the use of standard AWS CLI and CDK CLI commands (e.g., cdk deploy, aws sts get-caller-identity) required for infrastructure management. These commands are documented in a legitimate context for development and troubleshooting.
- [EXTERNAL_DOWNLOADS]: References to external dependencies are limited to official and well-known packages from standard registries (NPM, PyPI), such as aws-cdk-lib, constructs, and cdk-nag. The skill correctly advises pinning CLI versions to ensure reproducible and secure builds.
Audit Metadata