aws-mcp-setup
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses standard command-line tools such as
cat,grep,which, andaws ststo verify existing configurations and environment readiness. These operations are restricted to the local environment and are appropriate for the intended setup task. - [DATA_EXPOSURE]: The instructions involve reading local configuration files like
.mcp.jsonand~/.claude.json. This access is scoped to identifying specific MCP server keys and includes explicit warnings to redact environment variables or header values before printing content. - [EXTERNAL_DOWNLOADS]: The skill references the
mcp-proxy-for-awspackage from the official AWS GitHub organization. It suggests installation viauvx, a standard package runner, which is consistent with Model Context Protocol (MCP) deployment patterns. - [CREDENTIALS_UNSAFE]: While the skill provides templates for credential configuration, it uses placeholders (e.g.,
"...") rather than hardcoded secrets. It encourages the use of AWS Profiles or IAM Roles over environment variables for improved security.
Audit Metadata