awsclaw-apigateway
Warn
Audited by Gen Agent Trust Hub on Apr 13, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [DATA_EXFILTRATION]: The skill provides commands to retrieve sensitive security credentials and configuration data from the AWS environment. Examples include
GetApiKeyandGetApiKeysfor plain-text keys,GetClientCertificatefor SSL/TLS certificates, andGetUsagePlanKeyfor plan-specific keys. - [DATA_EXFILTRATION]: The
GetExportcommand includes anincludeCredentialsparameter which, if enabled, incorporates security credentials into the generated API definition file. - [COMMAND_EXECUTION]: The skill enables high-privilege administrative actions that can modify or destroy infrastructure, such as
DeleteRestApi,DeleteResource,DeleteMethod,DeleteStage, andDeleteAuthorizer. - [COMMAND_EXECUTION]: The
TestInvokeMethodandTestInvokeAuthorizercommands allow for arbitrary request triggering within the AWS environment, permitting the agent to send custom headers, bodies, and query strings to internal endpoints.
Audit Metadata