run-workshop
Pass
Audited by Gen Agent Trust Hub on Apr 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes multiple local Python scripts and shell commands (e.g.,
uv run python test_memory.py,bash deploy.sh) to test features and deploy AWS resources. This includes interaction with theagentcoreCLI tool.\n- [EXTERNAL_DOWNLOADS]: The skill usesuv run, which automatically manages Python environments and downloads necessary package dependencies from official registries like PyPI during the workshop execution.\n- [DATA_EXFILTRATION]: The skill reads local configuration files such as.bedrock_agentcore.yamland requests a user-provided SES sender email address. These actions are intended for configuring and testing the workshop's cloud infrastructure.\n- [PROMPT_INJECTION]: The skill accepts user-supplied$ARGUMENTSto control which workshop steps are run. It includes logic for the agent to parse, expand, and validate these inputs, which helps ensure they are treated as configuration parameters rather than executable commands.
Audit Metadata