aws-cdk-development

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: Defines allowed Bash commands related to standard deployment activities (cdk *, npm *, npx *, aws cloudformation *, and aws sts get-caller-identity). This is necessary for standard developer usage within an infrastructure-as-code environment.
  • [SAFE]: Includes a shell helper script scripts/validate-stack.sh that checks project architecture, compiles metadata, and reports on CloudFormation outputs without performing dangerous runtime operations or structural exfiltrations.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 08:29 AM