Skill-Audit-Bericht

aiml-access-diagnostics Audit-Bericht.

Use this skill when diagnosing IAM and access failures for Bedrock and SageMaker. It traces the authorization chain — caller identity, iam:PassRole, trust policy, role permissions, resource policies, SCPs — to name the denying hop and propose a scoped policy. Read-only. Use when a Bedrock or SageMaker call fails on permissions: InvokeModel or Converse AccessDeniedException, CreateTrainingJob or CreateEndpoint AccessDenied, "is not authorized to perform", "not authorized to perform: iam:PassRole", or an execution role that cannot reach S3, ECR, or KMS. Also covers Marketplace and model-subscription denials that are not IAM gaps, and failures under non-access codes: ValidationException "Could not assume role" (trust-policy gap) or "No S3 objects found under S3 URL" (execution role cannot list the prefix). Do NOT use for IAM questions outside AI/ML, policy authoring or least-privilege review without a failure, throttling or quota errors (ThrottlingException), model quality issues, or non-

Experimentell · PrüfenPrüfung nötigErstellt 13. Okt. 2026Heuristisches Metadaten-Audit
70
Audit
62
Vertrauen
60
Qualität
73
Sicherheit
88
Maintain
92
Installieren

OpenAgentSkill Trust Score

62
Manuelle Prüfung

OpenAgentSkill Trust Score

The Trust Score helps an agent decide whether a skill is safe enough to shortlist before installation.

GitHub-Akzeptanz

Warnung

48

42 GitHub-Stars

Star-/Fork-Aktivität

Warnung

48

42 Stars und 38 Forks; Issue-Aktivität ist in den aktuellen Metadaten nicht verfügbar

Aktuelle Wartung

Bestanden

88

1 Monate seit dem letzten Push

Lizenzklarheit

Bestanden

86

Apache-2.0

README/SKILL.md-Vollständigkeit

Info

76

Öffentliche Metadaten benötigen mehr README/SKILL.md-Kontext

Abhängigkeits-/Laufzeitrisiko

Info

64

credential or environment access, network or browser surface

Installationsverfügbarkeit

Bestanden

92

npx skills add aws/tools-for-devops-agent --skill aiml-access-diagnostics

Sicherheit des Installationsbefehls

Bestanden

92

Standard-Paket- oder Laufzeit-Installationspfad

Berechtigungsumfang

Warnung

46

secrets or environment access, filesystem or document access

Repository-Nachweis

Bestanden

86

https://github.com/aws/tools-for-devops-agent/tree/main/skills/aiml-access-diagnostics

Prüfstatus

Info

66

KI-Prüfdaten verfügbar

Agent-validierte Ergebnisse

Info

54

Noch keine Agent-Ergebnisdaten

Prüfungen

Installations- und Adoptionsprüfung

6 Bestanden · 15 Prüfung nötig

Installationspfad

92

Bestanden

npx skills add aws/tools-for-devops-agent --skill aiml-access-diagnostics

Repository

88

Bestanden

https://github.com/aws/tools-for-devops-agent/tree/main/skills/aiml-access-diagnostics

Lizenz

86

Bestanden

Apache-2.0

Wartung

88

Bestanden

1 Monate seit dem letzten Push

KI-Prüfung

55

Prüfen

SKILL.md references supporting files such as references/access-chain-model.md and a read-only data-collection allowlist, but those files are not present in the submitted file listing; the skill is incomplete as packaged.

README/SKILL.md-Vollständigkeit

84

Bestanden

Usable description available

Abhängigkeitsrisiko

64

Prüfen

credential or environment access, network or browser surface

Sicherheit des Installationsbefehls

92

Bestanden

Standard-Paket- oder Laufzeit-Installationspfad

Berechtigungsumfang

46

Beheben

secrets or environment access, filesystem or document access

Star-/Fork-Aktivität

48

Beheben

42 Stars und 38 Forks; Issue-Aktivität ist in den aktuellen Metadaten nicht verfügbar

Akzeptanz

42

Prüfen

42 GitHub-Stars

Warnungen

  • Permission surface may require sandboxing
  • SKILL.md references supporting files such as references/access-chain-model.md and a read-only data-collection allowlist, but those files are not present in the submitted file listing; the skill is incomplete as packaged.
  • The main SKILL.md does not explicitly enumerate the agent's required read-only AWS permissions or setup prerequisites, making it harder to operate safely without consulting external references.
  • The repository last-updated timestamp appears to be after the current review date; repository metadata should be verified.
  • Low GitHub adoption signal
  • Quality score needs review
  • Permission surface needs review: secrets or environment access, filesystem or document access
  • GitHub adoption: 42 GitHub stars
  • Stars/forks activity: 42 stars, 38 forks; issue activity unavailable in current metadata
  • Permission surface: secrets or environment access, filesystem or document access

Methode

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.

Nahe Optionen vergleichen

Ähnliche Skills als Nächstes prüfen