exploring-data-catalog
Pass
Audited by Gen Agent Trust Hub on May 14, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- Standard Tool Utilization: The skill relies on well-known AWS command-line tools such as
aws glue,aws s3tables, andaws sts. These are used for their intended purpose of listing and describing account resources. - Read-Only Operation Constraint: The instructions explicitly restrict the agent from performing state-changing operations or executing data queries (e.g.,
start-query-execution), focusing purely on metadata discovery and landscape mapping. - User Confirmation Checkpoints: The skill requires the agent to confirm the audit scope and AWS region with the user before initiating any discovery actions, ensuring transparency and control.
- Credential Validation: The skill uses
sts get-caller-identityas a best-practice safety check to verify that the execution environment has valid credentials before attempting catalog operations.
Audit Metadata