agents-build
Pass
Audited by Gen Agent Trust Hub on May 7, 2026
Risk Level: SAFE
Full Analysis
- Developer Environment Integration: The skill correctly utilizes the
Bashtool to perform local project management tasks such as checking theagentcoreCLI version and querying project status. These operations are essential for maintaining a consistent development environment. - Configuration Awareness: The process involves reading the
agentcore/agentcore.jsonconfiguration file. This allows the agent to provide context-aware suggestions for adding resources like memory or VPC connectivity without requiring the user to re-input existing metadata. - Security Best Practices for Credentials: The skill guides users to manage sensitive information (API keys, OAuth tokens) using the built-in credential provider (
agentcore add credential) and@requires_api_keydecorators. This helps prevent the accidental exposure of secrets in code or environment variables. - Educational Security Guidance: Detailed references are provided for potentially high-risk features, such as the
InvokeAgentRuntimeCommand. These references explicitly call out risks like command injection and provide mitigation strategies, such as CloudTrail monitoring and input sanitization. - Controlled Network Guidance: VPC and networking instructions emphasize the use of private subnets and NAT gateways for secure outbound connectivity, aligning with standard AWS architectural safety recommendations.
Audit Metadata