aws
Pass
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill proactively implements a safety protocol by explicitly banning high-risk mutation commands such as
cdk deploy,cdk destroy,terraform apply, andaws cloudformation deploy. This prevents accidental data loss or unauthorized infrastructure changes. - [EXTERNAL_DOWNLOADS]: The skill uses
pnpm dlx cdkto invoke the AWS CDK CLI. While this fetches code from a registry at runtime, it targets a well-known tool from a established vendor (AWS), which is standard practice for infrastructure-as-code development. - [DATA_EXFILTRATION]: No patterns of data exfiltration were detected. The allowed
awsCLI commands are limited to read-only operations (e.g.,aws s3 ls), and there are no instructions to send data to external or untrusted domains.
Audit Metadata