skills/aws/agent-toolkit-for-aws/configuring-vpc-endpoints-for-private-aws-service-access/Gen Agent Trust Hub
configuring-vpc-endpoints-for-private-aws-service-access
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- Administrative AWS Operations: The skill utilizes the
call_awstool and AWS CLI commands to describe and create VPC resources. These operations are essential for its functionality and trace back to the vendor's own infrastructure. - Input Validation for Policies: The skill accepts a custom
policy_documentfrom the user. It includes a requirement to validate the JSON syntax before applying the policy, which helps mitigate risks associated with malformed or malicious configurations. - Credential Management Best Practices: The skill explicitly instructs the agent to use AWS Secrets Manager for authentication and prohibits prompting for passwords. This adheres to industry standards for secure secret handling.
- Connectivity and DNS Testing: The inclusion of tools like
nslookupandaws s3 lsis intended for validating the private network configuration, which is a standard step in VPC endpoint setup.
Audit Metadata