Security audit
Security checks across malware telemetry and agentic risk
This is a legitimate Strands agent-building skill, but its default generated agents can read and write local files and run shell commands without strong safeguards.
Install only if you are comfortable treating generated agents as privileged local programs. Review generated code before running it, remove or constrain shell and file-write tools, use a sandbox or dedicated project directory, use least-privilege API and cloud credentials, and load only trusted agent files or MCP servers.
command: Shell command to execute.
"""
import subprocess
result = subprocess.run(command, shell=True, capture_output=True, text=True, timeout=60)
output = result.stdout
if result.stderr:
output += f"\\nSTDERR: {{result.stderr}}"command: Shell command to execute.
"""
import subprocess
result = subprocess.run(command, shell=True, capture_output=True, text=True, timeout=60)
output = result.stdout
if result.stderr:
output += f"\\nSTDERR: {{result.stderr}}"55/55 vendors flagged this skill as clean.
No suspicious patterns detected.