aws-skills
Pass
Audited by Gen Agent Trust Hub on Jul 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a legitimate technical resource for managing AWS Bedrock AgentCore. It emphasizes security best practices throughout its documentation, such as implementing the principle of least privilege through scoped IAM roles, using non-root users (UID 1000) for containerized agents, and managing sensitive data via dedicated AWS identity services rather than hardcoding credentials.
- [COMMAND_EXECUTION]: The skill utilizes the AWS CLI (
aws bedrock-agentcoreandaws bedrock-agentcore-control) for its primary management functions. These tools are standard for AWS infrastructure management. The skill also implements a security hook (PreToolUse) to verify the caller's AWS account identity before executing creation commands, which is a standard safety measure. - [EXTERNAL_DOWNLOADS]: The documentation and templates reference standard package managers (
pip,npm,uv) to install official AWS and Strands Agents libraries. These references target well-known, trusted organizations within the AWS and AI development ecosystems. Additionally, scripts such asdeploy-template.shinclude input validation using regular expressions to protect against command injection.
Audit Metadata