Security audit
Security checks across malware telemetry and agentic risk
This appears to be a legitimate Strands agent helper, but its default generated agent can read and write files and run shell commands without strong guardrails.
Use this only in an isolated Python environment or disposable workspace. Before running generated agents, review or remove the default file and shell tools, avoid pointing them at secrets or production repositories, use least-privilege cloud/API credentials, and connect only trusted MCP or A2A services.
command: Shell command to execute.
"""
import subprocess
result = subprocess.run(command, shell=True, capture_output=True, text=True, timeout=60)
output = result.stdout
if result.stderr:
output += f"\\nSTDERR: {{result.stderr}}"command: Shell command to execute.
"""
import subprocess
result = subprocess.run(command, shell=True, capture_output=True, text=True, timeout=60)
output = result.stdout
if result.stderr:
output += f"\\nSTDERR: {{result.stderr}}"64/64 vendors flagged this skill as clean.
No suspicious patterns detected.