redshift-api
Pass
Audited by Gen Agent Trust Hub on Jul 1, 2026
Risk Level: SAFE
Full Analysis
- [Network Communication]: The skill interacts exclusively with official Amazon Redshift service endpoints (redshift-data.region.amazonaws.com). This communication is essential for the skill's primary function and follows standard AWS API protocols.
- [Credential Management]: Authentication is handled by the skill's runtime environment rather than the skill itself. The instructions explicitly advise against manual key management, which is a security best practice that prevents the accidental exposure of sensitive AWS credentials.
- [Tool Utilization]: The implementation relies on widely-used, standard command-line tools such as
curlandjq. These tools are used transparently within shell scripts to perform HTTP requests and process structured data. - [SQL Injection Mitigations]: The provided helper script
rs_query.shincludes built-in support for query parameters. This allows for the safe interpolation of variables into SQL statements, which is a key defense against SQL injection vulnerabilities at the database layer. - [Data Processing]: The skill ingests and processes results from database queries. This is performed using structured
jqtransformations, which is a secure method for handling and formatting external data before it is presented to the user or agent.
Audit Metadata