agents-build

Pass

Audited by Gen Agent Trust Hub on May 7, 2026

Risk Level: SAFE
Full Analysis
  • Developer Environment Integration: The skill correctly utilizes the Bash tool to perform local project management tasks such as checking the agentcore CLI version and querying project status. These operations are essential for maintaining a consistent development environment.
  • Configuration Awareness: The process involves reading the agentcore/agentcore.json configuration file. This allows the agent to provide context-aware suggestions for adding resources like memory or VPC connectivity without requiring the user to re-input existing metadata.
  • Security Best Practices for Credentials: The skill guides users to manage sensitive information (API keys, OAuth tokens) using the built-in credential provider (agentcore add credential) and @requires_api_key decorators. This helps prevent the accidental exposure of secrets in code or environment variables.
  • Educational Security Guidance: Detailed references are provided for potentially high-risk features, such as the InvokeAgentRuntimeCommand. These references explicitly call out risks like command injection and provide mitigation strategies, such as CloudTrail monitoring and input sanitization.
  • Controlled Network Guidance: VPC and networking instructions emphasize the use of private subnets and NAT gateways for secure outbound connectivity, aligning with standard AWS architectural safety recommendations.
Audit Metadata
Risk Level
SAFE
Analyzed
May 7, 2026, 07:15 PM