aws-lambda-functions
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides legitimate developer tools and documentation for managing AWS cloud infrastructure. All templates and scripts follow established industry patterns for serverless deployment.
- [EXTERNAL_DOWNLOADS]: Reference guides include instructions to download well-known, trusted packages (lodash, axios, moment) from the official NPM registry to create Lambda Layers.
- [INDIRECT_PROMPT_INJECTION]: The skill documents the ingestion of external data from event sources which is a potential surface for indirect prompt injection.
- Ingestion points: references/lambda-function-with-nodejs.md (event.body and S3 event records).
- Boundary markers: Absent in the provided boilerplate code.
- Capability inventory: AWS CLI (IAM/Lambda), Terraform, and SAM for deployment of cloud services.
- Sanitization: Not explicitly implemented in the example handler beyond standard JSON parsing.
Audit Metadata