aws-skills

Pass

Audited by Gen Agent Trust Hub on Jul 27, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is a legitimate technical resource for managing AWS Bedrock AgentCore. It emphasizes security best practices throughout its documentation, such as implementing the principle of least privilege through scoped IAM roles, using non-root users (UID 1000) for containerized agents, and managing sensitive data via dedicated AWS identity services rather than hardcoding credentials.
  • [COMMAND_EXECUTION]: The skill utilizes the AWS CLI (aws bedrock-agentcore and aws bedrock-agentcore-control) for its primary management functions. These tools are standard for AWS infrastructure management. The skill also implements a security hook (PreToolUse) to verify the caller's AWS account identity before executing creation commands, which is a standard safety measure.
  • [EXTERNAL_DOWNLOADS]: The documentation and templates reference standard package managers (pip, npm, uv) to install official AWS and Strands Agents libraries. These references target well-known, trusted organizations within the AWS and AI development ecosystems. Additionally, scripts such as deploy-template.sh include input validation using regular expressions to protect against command injection.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 27, 2026, 01:36 AM
Security Audit — agent-trust-hub — aws-skills