aws-cdk

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFE
Full Analysis
  • [Infrastructure Management Surface]: The skill facilitates interaction with AWS services via the CDK CLI. While performing actions like cdk bootstrap and cdk deploy requires elevated permissions, the documentation provides necessary warnings and advocates for the use of IAM OIDC, permissions boundaries, and least-privilege principles to secure the environment.
  • [Indirect Prompt Injection Considerations]: As a development tool, the skill processes user-defined infrastructure code (TypeScript/Python). This represents a potential surface for indirect prompt injection. However, the skill incorporates mitigation strategies by mandating manual verification steps, such as reviewing cdk diff output before any production deployment, maintaining a human-in-the-loop.
  • [Standard Tooling Integration]: The skill references established packages and utilities within the AWS and development ecosystems, such as cdk-nag, aws-cdk-lib, and esbuild. These resources are used according to their intended purposes to support compliance checking and efficient infrastructure synthesis.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 11:26 PM
Security Audit — agent-trust-hub — aws-cdk