Security audit
Security checks for vulnerabilities and agentic risk
This AWS audit skill is mostly purpose-aligned, but its user-facing scope and read-only claims do not fully match the AWS APIs and local database changes it performs.
Review the IAM policy and exact checks before installing. Use a dedicated AWS audit user, confirm you are comfortable granting account-wide inventory and security-finding read access plus credential report generation, and treat the local GRC database as sensitive because it will store security findings and configuration evidence.
"--file-content", json.dumps(result, default=str),
]
proc = subprocess.run(cmd, capture_output=True, text=True)
if proc.returncode != 0:
return _store_evidence_direct(db_path, check_name, result)for service_name, (client_name, method_name, kwargs) in service_probes.items():
try:
client = session.client(client_name, region_name=region)
getattr(client, method_name)(**kwargs)
results.append({"service": service_name, "status": "ok", "detail": "accessible"})
passed += 1
except client.exceptions.ClientError as e: