strands-evals

No direct malicious behavior is evident in this workflow fragment. The primary concern is supply-chain exposure from third-party actions pinned to mutable @main branches, particularly actions running with write permissions or access to OIDC and AWS secrets. Dispatch authorization relies on GitHub's workflow-dispatch access controls because the explicit authorization check is skipped.

No direct malicious behavior is visible in this workflow, but its use of pull_request_target with a mutable third-party action, write permissions, and OIDC capability creates meaningful supply-chain and privilege-escalation risk. Pin actions to verified commit SHAs, minimize permissions, and confirm the AWS role trust policy and action implementation.