aws-cdk-development
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: Defines allowed Bash commands related to standard deployment activities (
cdk *,npm *,npx *,aws cloudformation *, andaws sts get-caller-identity). This is necessary for standard developer usage within an infrastructure-as-code environment. - [SAFE]: Includes a shell helper script
scripts/validate-stack.shthat checks project architecture, compiles metadata, and reports on CloudFormation outputs without performing dangerous runtime operations or structural exfiltrations.
Audit Metadata