Strands

This skill is largely coherent with its stated purpose (a Strands SDK), but pay attention to three things before installing or running it: 1) Metadata mismatch — the registry claims no required env vars but the docs/examples require AWS credentials and several provider API keys; treat that as a red flag and verify which keys you supply. 2) Powerful default tools — the scaffolded agent includes file read/write and run_command (subprocess with shell=True). Remove or tightly restrict these tools unless you trust the agent code and execution environment. 3) Code execution surface — run-agent imports and executes arbitrary agent Python files and the SDK supports hot-reloading tools directories; only load agents and tools from trusted sources and consider running them in an isolated container, VM, or least‑privileged account. Operational suggestions: use a dedicated, limited-privilege AWS account/role for Bedrock access (or avoid Agent() default Bedrock by always passing model=), avoid placing real production secrets in environment variables used by this skill, audit and remove the run_command tool if you don't need shell access, and review any scaffolded code before running. If you need higher confidence, request the skill author/publisher identity or prefer an official release from the upstream repo (https://github.com/strands-agents/sdk-python) and validate versions and checksums.