aws-cdk-development
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The documentation recommends registering the 'awslabs.aws-iac-mcp-server' using the 'uvx' tool runner. It also suggests installing 'cdk-nag' via standard package managers like npm or pip. These tools are provided by well-known organizations and are standard in the CDK ecosystem.
- [COMMAND_EXECUTION]: The skill includes 'scripts/validate-stack.sh', a bash script that executes 'cdk synth' and uses 'jq' to analyze the resulting CloudFormation templates for resource count and size.
- [DYNAMIC_EXECUTION]: The primary workflow relies on 'cdk synth', which executes the project's CDK application code and its dependencies at runtime to generate infrastructure templates. The skill includes warnings to review project code and AWS context before execution.
- [INDIRECT_PROMPT_INJECTION]: The skill reads and processes local project files and synthesis outputs, which could potentially contain adversarial instructions embedded in comments or metadata.
- Ingestion points: Local configuration files (package.json, requirements.txt, go.mod), CDK application source code, and synthesized CloudFormation templates.
- Boundary markers: No specific boundary markers or instructions to ignore embedded content are implemented in the validation scripts.
- Capability inventory: Execution of shell commands, synthesis of application code via CDK, and template analysis using jq.
- Sanitization: No explicit sanitization or filtering of project-sourced data was identified.
Audit Metadata