connecting-to-data-source
Pass
Audited by Gen Agent Trust Hub on May 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- Infrastructure Management Commands: The skill utilizes AWS CLI commands to discover and configure resources such as AWS Glue connections, RDS instances, and Redshift clusters. This is a standard pattern for administrative skills and includes validation steps like
sts get-caller-identityto verify the execution context. - Secure Credential Management: It encourages the use of AWS Secrets Manager and IAM Database Authentication instead of plaintext passwords. The instructions for handling service account keys (e.g., for Google BigQuery) use local encoding techniques to store credentials securely within the user's AWS account.
- Trusted Service Communication: The skill identifies and connects to well-known cloud services including Google BigQuery (
bigquery.googleapis.com) and Snowflake. These are expected endpoints for the skill's stated purpose of cross-cloud data connectivity. - Diagnostic Script Execution: For troubleshooting, the skill provides a Python template for a Glue ETL smoke test. This script is generated locally and executed within the user's managed AWS Glue environment to verify connectivity, representing a common diagnostic pattern in data engineering workflows.
Audit Metadata