setup-devops-agent
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [Tool Installation from Trusted Source]: The skill provides instructions to install the 'uv' tool using a shell script from 'astral.sh'. While downloading and piping to a shell is a security consideration, this is the official installation method for a well-known development utility used here to manage MCP proxy dependencies.
- [AWS Infrastructure Integration]: The skill interacts with official AWS endpoints (e.g., 'connect.aidevops.api.aws') and utilizes standard AWS CLI commands like 'aws sts get-caller-identity'. These operations are expected for a configuration skill authored by AWS and follow standard authentication patterns (SigV4 and Bearer tokens).
- [Credential Management Awareness]: The instructions involve checking for and setting environment variables like 'DEVOPS_AGENT_TOKEN'. The skill follows safe practices by advising users to set these in their environment rather than hardcoding them into the skill scripts themselves.
- [MCP Configuration Modification]: The skill automates the creation of '.mcp.json' files to register the DevOps Agent server. This involves defining command execution (via 'uvx') and header configurations, which are standard for extending agent capabilities through the Model Context Protocol.
Audit Metadata