aws-sdk-js-v3-usage

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFE
Full Analysis
  • Official Vendor Resource Patterns: The skill utilizes standard AWS naming conventions for packages (@aws-sdk/, @smithy/) and includes placeholder identifiers (such as the 123456789012 account ID) that are consistent with official technical documentation.
  • Secure Credential Handling: The skill reinforces security best practices by documenting the use of temporary credentials (STS), named profiles, and the default Node.js provider chain rather than promoting hardcoded secrets.
  • Resource Management Guidance: It provides clear instructions for preventing common development pitfalls such as socket exhaustion by emphasizing the need to read or discard streaming responses and correctly configuring request handlers.
  • Trusted External References: All external links point to official AWS and Smithy repositories, which are recognized sources for this ecosystem. The instructions for installing additional packages like the CRT or pure-JS SigV4a implementations follow standard procedure for these specific features.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 11:26 PM
Security Audit — agent-trust-hub — aws-sdk-js-v3-usage