aws-sdk-js-v3-usage

Pass

Audited by Gen Agent Trust Hub on May 9, 2026

Risk Level: SAFE
Full Analysis
  • Official AWS SDK Patterns: The skill provides standard implementation examples for the AWS SDK for JavaScript v3. These patterns, including client instantiation, command execution, and error handling, are consistent with official AWS documentation and best practices.
  • Credential Management Education: The skill explains how various credential providers work, such as fromIni() and fromTemporaryCredentials(). While it mentions standard sensitive file paths like ~/.aws/credentials and ~/.aws/config, these are cited neutrally to explain the SDK's built-in credential discovery mechanism and do not represent a data exposure risk in this context.
  • Dependency Usage: All referenced packages (e.g., @aws-sdk/*, @smithy/*) are official, well-maintained libraries from the AWS and Smithy ecosystems. The skill correctly identifies the need for specific implementations like @aws-sdk/signature-v4-crt for advanced signing features like S3 Multi-Region Access Points.
  • Performance and Resource Safety: The instructions include important safety considerations such as avoiding socket exhaustion by properly reading or destroying streaming responses (e.g., S3 GetObject Body). It also provides guidance on parallel workloads and client reuse to ensure efficient resource management.
Audit Metadata
Risk Level
SAFE
Analyzed
May 9, 2026, 07:16 PM