infrastructure-code-synthesis
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides legitimate guidance for AWS CDK development, adhering to industry best practices such as IAM least privilege and the use of AWS Secrets Manager for sensitive data.
- [SAFE]: The provided validation script (scripts/validate-stack.sh) performs standard meta-level checks on synthesized CloudFormation templates, such as file size and resource counts, without executing dangerous commands or performing network operations.
- [SAFE]: External dependencies and tools mentioned, such as cdk-nag and the AWS CDK CLI, are well-known and standard utilities within the AWS ecosystem.
- [SAFE]: The skill correctly uses instructional highlights to emphasize technical requirements and best practices rather than attempting to bypass AI safety guardrails or inject malicious instructions.
Audit Metadata