aws-architecture-diagram
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches and executes the
aws-diagram-mcp-serverutility from theawslabsorganization using theuvxpackage runner to handle infrastructure scanning and diagram generation. - [COMMAND_EXECUTION]: Executes shell commands to run the MCP server using
uvxand provides instructions for installing thegraphvizsystem dependency via package managers likeaptorbrew. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from the AWS environment, such as resource names, tags, and metadata, which could potentially contain malicious instructions targeting the agent during diagram generation.
- Ingestion points: Infrastructure metadata retrieved from live AWS APIs, including resource tags and configuration values (SKILL.md).
- Boundary markers: No specific delimiters or warnings are defined to separate ingested resource data from instructions.
- Capability inventory: Executes
uvxfor tool startup, usesgraphvizfor file rendering, and performs network requests to AWS service endpoints. - Sanitization: The skill does not document any sanitization or escaping procedures for metadata before it is processed for diagram output.
Audit Metadata