configuring-vpc-endpoints-for-private-aws-service-access

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFE
Full Analysis
  • Administrative AWS Operations: The skill utilizes the call_aws tool and AWS CLI commands to describe and create VPC resources. These operations are essential for its functionality and trace back to the vendor's own infrastructure.
  • Input Validation for Policies: The skill accepts a custom policy_document from the user. It includes a requirement to validate the JSON syntax before applying the policy, which helps mitigate risks associated with malformed or malicious configurations.
  • Credential Management Best Practices: The skill explicitly instructs the agent to use AWS Secrets Manager for authentication and prohibits prompting for passwords. This adheres to industry standards for secure secret handling.
  • Connectivity and DNS Testing: The inclusion of tools like nslookup and aws s3 ls is intended for validating the private network configuration, which is a standard step in VPC endpoint setup.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 11:58 AM
Security Audit — agent-trust-hub — configuring-vpc-endpoints-for-private-aws-service-access