aws-cdk
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- [Infrastructure Management Surface]: The skill facilitates interaction with AWS services via the CDK CLI. While performing actions like
cdk bootstrapandcdk deployrequires elevated permissions, the documentation provides necessary warnings and advocates for the use of IAM OIDC, permissions boundaries, and least-privilege principles to secure the environment. - [Indirect Prompt Injection Considerations]: As a development tool, the skill processes user-defined infrastructure code (TypeScript/Python). This represents a potential surface for indirect prompt injection. However, the skill incorporates mitigation strategies by mandating manual verification steps, such as reviewing
cdk diffoutput before any production deployment, maintaining a human-in-the-loop. - [Standard Tooling Integration]: The skill references established packages and utilities within the AWS and development ecosystems, such as
cdk-nag,aws-cdk-lib, andesbuild. These resources are used according to their intended purposes to support compliance checking and efficient infrastructure synthesis.
Audit Metadata