aws-sst-development

Pass

Audited by Gen Agent Trust Hub on Aug 4, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands for infrastructure management and deployment, specifically npx sst deploy, npx sst diff, and npx sst version.
  • [COMMAND_EXECUTION]: Directs the agent to run aws sts get-caller-identity as a security control to verify the current AWS context before performing deployments.
  • [SAFE]: Promotes proactive security hygiene by instructing the agent to clean up exported state files that might contain sensitive ARNs or account IDs.
  • [SAFE]: Implements stage-gated safety logic, recommending that production resources be set to 'retain' while non-production resources are 'removed' during stack teardowns.
  • [SAFE]: No malicious patterns, obfuscation, or unauthorized data exfiltration techniques were detected. The skill's behavior is consistent with its stated purpose as a developer tool for IaC.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 4, 2026, 08:32 PM
Security Audit — agent-trust-hub — aws-sst-development