The @aws/nx-plugin is a collection of code generators that automate the creation and configuration of cloud-native applications using AWS, TypeScript, Python and React within the Nx development ecosystem.
Drift inferred · capture-to-capture
- HIGH code analysis flagged committed secret ×2, dynamic code execution in awslabs/nx-plugin-for-aws
- HIGH code analysis flagged committed secret in awslabs/nx-plugin-for-aws
- HIGH code analysis flagged committed secret in awslabs/nx-plugin-for-aws
- HIGH code analysis flagged committed secret in awslabs/nx-plugin-for-aws
- HIGH code analysis flagged committed secret in awslabs/nx-plugin-for-aws
- HIGH code analysis flagged committed secret in awslabs/nx-plugin-for-aws
- HIGH code analysis flagged committed secret in awslabs/nx-plugin-for-aws
- HIGH code analysis flagged committed secret in awslabs/nx-plugin-for-aws
- HIGH code analysis flagged committed secret in awslabs/nx-plugin-for-aws
- HIGH code analysis flagged committed secret in awslabs/nx-plugin-for-aws
- HIGH code analysis flagged committed secret in awslabs/nx-plugin-for-aws
transport stdio · http counts 0 tools · 0 res
· 0 prompts
permission surface via code analysis
No tools enumerated yet for this server.
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit 8552a5f · analyzer v28 · 2d ago
skills & prompt files 2
danger signals3
- dynamic code execution new Function() awslabs-nx-plugin-for-aws-8552a5f/packages/nx-plugin/src/migrations/latest/modernize-function-props-cast/migration.spec.ts :26
const handler = new Function(scope, \`TestApi\${op}Handler\`, props); - committed secret AWS access key id awslabs-nx-plugin-for-aws-8552a5f/.gitallowed :2
AKIAIO…(20 chars, redacted) - committed secret AWS access key id awslabs-nx-plugin-for-aws-8552a5f/e2e/src/smoke-tests/git-secrets.spec.ts :83
AKIAIO…(20 chars, redacted)
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 420
filesystem 19
- fs awslabs-nx-plugin-for-aws-8552a5f/packages/create-nx-workspace/src/create-nx-workspace.ts :6
import { existsSync, readFileSync } from 'fs'; - fs awslabs-nx-plugin-for-aws-8552a5f/packages/nx-plugin/src/license/dependency-check/collectors/collector.ts :7
import { existsSync } from 'fs'; - fs awslabs-nx-plugin-for-aws-8552a5f/packages/nx-plugin/src/license/dependency-check/collectors/npm-collector.ts :5
import { existsSync, readFileSync } from 'fs'; - fs awslabs-nx-plugin-for-aws-8552a5f/packages/nx-plugin/src/license/dependency-check/collectors/python-collector.ts :9
import { existsSync, readFileSync } from 'fs'; - fs awslabs-nx-plugin-for-aws-8552a5f/packages/nx-plugin/src/mcp-server/generator-info.ts :6
import fs from 'fs'; - fs awslabs-nx-plugin-for-aws-8552a5f/packages/nx-plugin/src/mcp-server/guide-pipeline.ts :6
import fs from 'fs'; - fs awslabs-nx-plugin-for-aws-8552a5f/packages/nx-plugin/src/mcp-server/schema-registry.ts :5
import fs from 'node:fs'; - fs awslabs-nx-plugin-for-aws-8552a5f/packages/nx-plugin/src/preset/generator.ts :14
import { readFileSync } from 'fs'; - fs awslabs-nx-plugin-for-aws-8552a5f/packages/nx-plugin/src/py/agent/generator.ts :272
fs.rm(dockerOutputDir), - fs awslabs-nx-plugin-for-aws-8552a5f/packages/nx-plugin/src/py/mcp-server/generator.ts :156
fs.rm(dockerOutputDir), - fs awslabs-nx-plugin-for-aws-8552a5f/packages/nx-plugin/src/py/rdb/generator.ts :162
fs.rm(migrationBundleDir), - fs awslabs-nx-plugin-for-aws-8552a5f/packages/nx-plugin/src/ts/lib/vitest.ts :6
import { readFileSync } from 'fs'; - fs awslabs-nx-plugin-for-aws-8552a5f/packages/nx-plugin/src/ts/rdb/generator.ts :174
fs.rm(`${relativePathToRoot}dist/{projectRoot}/bundle/migration`), - fs awslabs-nx-plugin-for-aws-8552a5f/packages/nx-plugin/src/ts/react-website/cognito-auth/generator.ts :11
import { readFileSync } from 'fs'; - fs awslabs-nx-plugin-for-aws-8552a5f/packages/nx-plugin/src/ts/react-website/cognito-auth/utils.ts :6
import { readFileSync } from 'fs'; - fs awslabs-nx-plugin-for-aws-8552a5f/packages/nx-plugin/src/utils/config/utils.ts :6
import { existsSync, readFileSync } from 'fs'; - fs awslabs-nx-plugin-for-aws-8552a5f/packages/nx-plugin/src/utils/docker.ts :94
fs.rm(scanDir), - fs awslabs-nx-plugin-for-aws-8552a5f/packages/nx-plugin/src/utils/init.ts :15
import { readFileSync } from 'fs'; - fs awslabs-nx-plugin-for-aws-8552a5f/packages/nx-plugin/src/utils/install.ts :5
import { existsSync } from 'node:fs';
shell / exec 7
- shell awslabs-nx-plugin-for-aws-8552a5f/packages/create-nx-workspace/src/create-nx-workspace.ts :5
import { spawnSync } from 'child_process'; - shell awslabs-nx-plugin-for-aws-8552a5f/packages/nx-plugin/src/license/dependency-check/collectors/python-collector.ts :7
import { execSync } from 'child_process'; - shell awslabs-nx-plugin-for-aws-8552a5f/packages/nx-plugin/src/migrations/latest/terraform-bootstrap-adopt-existing-bucket/migration.ts :54
const INIT_PATTERN = "`execFileSync('terraform', ['init'], $opts)`"; - shell awslabs-nx-plugin-for-aws-8552a5f/packages/nx-plugin/src/preset/generator.ts :12
import { execSync } from 'child_process'; - shell awslabs-nx-plugin-for-aws-8552a5f/packages/nx-plugin/src/utils/ast.ts :379
// Function replacer so `$` in `text` isn't treated as a replacement pattern. - shell awslabs-nx-plugin-for-aws-8552a5f/packages/nx-plugin/src/utils/containers.ts :6
import { execSync } from 'child_process'; - shell awslabs-nx-plugin-for-aws-8552a5f/packages/nx-plugin/src/utils/git.ts :6
import { execSync } from 'child_process';
install hooks 1
- prepare awslabs-nx-plugin-for-aws-8552a5f/package.json :8
husky || true
declared dependencies 131
- @modelcontextprotocol/inspector@0.22.0
- @modelcontextprotocol/sdk@1.29.0
- @a2a-js/sdk@0.3.14
- @apidevtools/swagger-parser@12.1.0
- @astral-sh/ruff-wasm-nodejs@0.15.22
- @astrojs/react@6.0.1
- @astrojs/starlight@0.41.3
- @astrojs/starlight-tailwind@5.0.0
- @aws-lambda-powertools/logger@2.34.0
- @aws-lambda-powertools/metrics@2.34.0
- @aws-lambda-powertools/parser@2.34.0
- @aws-lambda-powertools/tracer@2.34.0
- @aws-sdk/client-bedrock-runtime@3.1090.0
- @aws-sdk/client-cloudformation@3.1090.0
- @aws-sdk/client-cognito-identity-provider@3.1090.0
- @aws-sdk/client-lambda@3.1090.0
- @aws-sdk/credential-provider-node@3.972.70
- @aws-sdk/credential-providers@3.1090.0
- @biomejs/biome@2.5.4
- @biomejs/js-api@6.0.0
- @biomejs/wasm-nodejs@2.5.4
- @commitlint/cli@21.2.1
- @commitlint/config-conventional@21.2.0
- @getgrit/gritql@0.0.3
- @iarna/toml@2.2.5
- @middy/core@7.7.0
- @nx/devkit@23.1.0
- @nx/js@23.1.0
- @nx/playwright@23.1.0
- @nx/react@23.1.0
- @nx/vite@23.1.0
- @nx/vitest@23.1.0
- @nxlv/python@22.2.2
- @phenomnomnominal/tsquery@6.2.0
- @quantco/pnpm-licenses@2.4.2
- @smithy/node-http-handler@4.9.7
- @strands-agents/sdk@1.10.0
- @swc-node/register@1.12.1
- @swc/cli@0.8.1
- @swc/core@1.15.43
- @swc/helpers@0.5.23
- @tailwindcss/vite@4.3.3
- @tanstack/react-query@5.101.2
- @tanstack/react-query-devtools@5.101.2
- @testing-library/react@16.3.2
- @trpc/client@11.18.0
- @trpc/server@11.18.0
- @ts-morph/bootstrap@0.29.0
- @types/aws-lambda@8.10.162
- @types/fs-extra@11.0.4
- @types/lodash.camelcase@4.3.9
- @types/lodash.clonedeepwith@4.5.9
- @types/lodash.deburr@4.1.9
- @types/lodash.kebabcase@4.1.9
- @types/lodash.orderby@4.6.9
- @types/lodash.snakecase@4.1.9
- @types/lodash.trim@4.5.9
- @types/lodash.uniqby@4.7.9
- @types/estree@1.0.9
- @types/js-yaml@4.0.9
- @types/mdast@4.0.4
- @types/node@26.1.1
- @types/react@19.2.17
- @types/react-dom@19.2.3
- @types/spdx-satisfies@6.0.0
- @vitejs/plugin-react@6.0.3
- @vitest/coverage-v8@4.1.10
- @vitest/ui@4.1.10
- astro@7.1.1
- astro-d2@0.13.1
- aws4fetch@1.0.20
- chalk@5.6.2
- class-variance-authority@0.7.1
- clsx@2.1.1
- commander@15.0.0
- commitizen@4.3.2
- cz-conventional-changelog@3.3.0
- diff@9.0.0
- enquirer@2.4.1
- esbuild@0.28.1
- exponential-backoff@3.1.3
- fast-glob@3.3.3
- fs-extra@11.3.6
- github-slugger@2.0.0
- husky@9.1.7
- jiti@2.7.0
- js-yaml@4.3.0
- jsdom@29.1.1
- license-checker-rseidelsohn@4.4.2
- lint-staged@17.1.0
- llm-mock-server@^1.1.0
- lodash.camelcase@4.3.0
- lodash.clonedeepwith@4.5.0
- lodash.deburr@4.1.0
- lodash.orderby@4.18.0
- lodash.trim@4.18.0
- lodash.uniqby@4.7.0
- lucide-react@1.25.0
- mdast-util-mdx-jsx@3.2.0
- minimatch@10.2.5
- node-pty@^1.1.0
- nx@23.1.0
- openapi-types@12.1.3
- pip-requirements-js@1.0.3
- playwright@1.61.1
- react@19.2.7
- react-dom@19.2.7
- remark-frontmatter@5.0.0
- remark-mdx@3.1.1
- remark-parse@11.0.0
- remark-stringify@11.0.0
- rolldown@1.2.0
- semver@7.8.5
- simple-git@3.36.0
- spdx-satisfies@6.0.0
- starlight-blog@0.28.0
- starlight-contributor-list@0.4.0
- starlight-links-validator@0.25.2
- starlight-videos@0.5.0
- tailwind-merge@3.6.0
- tailwindcss@4.3.3
- tslib@2.8.1
- tsx@4.23.1
- tw-animate-css@1.4.0
- typescript@6.0.3
- unified@11.0.5
- unist-util-visit@5.1.0
- verdaccio@6.8.0
- vite@8.1.5
- vitest@4.1.10
- zod@4.4.3