hf-cloud-aws-context-discovery
Discover the user's local AWS context (active profile, region, account ID, caller identity) at the start of any AWS task. Use this skill before any other AWS work — deploying to SageMaker, creating resources, calling AWS APIs, or anything that touches an AWS account. Use it especially when the us...
Install this skill
or
10/100
Security score
The hf-cloud-aws-context-discovery skill was audited on Oct 1, 2026 and we found 6 security issues across 1 threat category, including 3 critical. Review the findings below before installing.
Categories Tested
Security Issues
critical line 16
Access to AWS credentials directory
SourceSKILL.md
| 14 | ### 1. Active profile |
| 15 | |
| 16 | `AWS_PROFILE` env var, else `default`. If the user mentioned a profile in their prompt, that overrides. If the named profile doesn't exist in `~/.aws/config`, surface that clearly. |
| 17 | |
| 18 | ### 2. Region |
critical line 24
Access to AWS credentials directory
SourceSKILL.md
| 22 | 2. `AWS_REGION` env var |
| 23 | 3. `AWS_DEFAULT_REGION` env var |
| 24 | 4. `region` field on the active profile in `~/.aws/config` |
| 25 | 5. Ask the user — but only after the first four have failed |
| 26 |
critical line 64
Access to AWS credentials directory
SourceSKILL.md
| 62 | ``` |
| 63 | |
| 64 | `aws configure list` handles env-var overrides and shows the resolved effective values. Prefer it over parsing `~/.aws/config` yourself. If you need to read raw config (e.g. to list profiles), `~/.aws/config` and `~/.aws/credentials` are plain INI files — read-only. |
| 65 | |
| 66 | ## What to report back |
medium line 16
Access to home directory dotfiles
SourceSKILL.md
| 14 | ### 1. Active profile |
| 15 | |
| 16 | `AWS_PROFILE` env var, else `default`. If the user mentioned a profile in their prompt, that overrides. If the named profile doesn't exist in `~/.aws/config`, surface that clearly. |
| 17 | |
| 18 | ### 2. Region |
medium line 24
Access to home directory dotfiles
SourceSKILL.md
| 22 | 2. `AWS_REGION` env var |
| 23 | 3. `AWS_DEFAULT_REGION` env var |
| 24 | 4. `region` field on the active profile in `~/.aws/config` |
| 25 | 5. Ask the user — but only after the first four have failed |
| 26 |
medium line 64
Access to home directory dotfiles
SourceSKILL.md
| 62 | ``` |
| 63 | |
| 64 | `aws configure list` handles env-var overrides and shows the resolved effective values. Prefer it over parsing `~/.aws/config` yourself. If you need to read raw config (e.g. to list profiles), `~/.aws/config` and `~/.aws/credentials` are plain INI files — read-only. |
| 65 | |
| 66 | ## What to report back |
Scanned on Oct 1, 2026
View Security Dashboard