redshift-api

Pass

Audited by Gen Agent Trust Hub on Jul 1, 2026

Risk Level: SAFE
Full Analysis
  • [Network Communication]: The skill interacts exclusively with official Amazon Redshift service endpoints (redshift-data.region.amazonaws.com). This communication is essential for the skill's primary function and follows standard AWS API protocols.
  • [Credential Management]: Authentication is handled by the skill's runtime environment rather than the skill itself. The instructions explicitly advise against manual key management, which is a security best practice that prevents the accidental exposure of sensitive AWS credentials.
  • [Tool Utilization]: The implementation relies on widely-used, standard command-line tools such as curl and jq. These tools are used transparently within shell scripts to perform HTTP requests and process structured data.
  • [SQL Injection Mitigations]: The provided helper script rs_query.sh includes built-in support for query parameters. This allows for the safe interpolation of variables into SQL statements, which is a key defense against SQL injection vulnerabilities at the database layer.
  • [Data Processing]: The skill ingests and processes results from database queries. This is performed using structured jq transformations, which is a secure method for handling and formatting external data before it is presented to the user or agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 1, 2026, 11:17 PM
Security Audit — agent-trust-hub — redshift-api