lambda
Pass
Audited by Gen Agent Trust Hub on Jul 23, 2026
Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill implementation patterns for event handling create a potential surface for indirect prompt injection.
- Ingestion points: Event handlers in
references/powertools-patterns.mdandreferences/event-sources.mdingest data from external triggers like SQS and API Gateway. - Boundary markers: There are no explicit delimiters or instructions provided to separate untrusted event data from the agent's logic.
- Capability inventory: The agent can perform sensitive operations using the AWS CLI, including
aws lambda update-function-codeandaws lambda update-function-configuration. - Sanitization: The code snippets demonstrate typical business logic without specialized sanitization to prevent adversarial instructions within event payloads.
- [EXTERNAL_DOWNLOADS]: The skill references external tools for optimization and monitoring.
- Finding: Mentions the performance benchmarking tool at
github.com/alexcasalboni/aws-lambda-power-tuning. - Finding: Provides an AWS Lambda Layer ARN for the Powertools library (
017000801446). - [COMMAND_EXECUTION]: The skill uses the AWS CLI to manage Lambda resources.
- Finding: Includes commands for invoking functions (
aws lambda invoke), updating code (aws lambda update-function-code), and retrieving logs (aws logs tail).
Audit Metadata