aws-lambda-durable-functions Audit-Bericht.

Warnungen

• Dependency or permission surface needs review
• Permission surface may require sandboxing
• SKILL.md does not include an explicit security section covering least-privilege IAM, input validation, or protection of secrets when generating durable function workflows.
• The advanced GenAI agent examples accept dynamic tool names and external model output, but the skill does not emphasize guardrails against prompt injection or allowlisting tool calls.
• The skill assumes the user has AWS credentials and deployment permissions, but it does not warn about credential handling, blast radius, or reviewing infrastructure changes before deployment.
• Quality score needs review
• Permission surface needs review: shell or command execution, filesystem or document access
• Dependency/runtime risk: command execution surface, external package install surface
• Permission surface: shell or command execution, filesystem or document access

Methode

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.