aws-database
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFE
Full Analysis
- Official Resource Installation: The skill contains instructions to install specialized sub-skills using an
npxcommand that targets a specific repository within the official AWS GitHub organization. This is an intended extensibility feature and follows the project's trust model. - Instructional Safeguards: The service handoff procedure uses a predefined mapping table to resolve skill names. This approach prevents arbitrary user input from being directly executed in the installation command, mitigating potential command injection risks.
- Security Feedback Handling: The skill includes a dedicated procedure for handling reported issues, which explicitly instructs the agent to direct security-related concerns to the official AWS vulnerability reporting process rather than filing them in public issue trackers.
- Data Veracity and Retrieval: The skill is designed to prioritize fetching live documentation from official sources, such as
llms.txtendpoints and dedicated documentation tools, rather than relying on internal training data that may be outdated.
Audit Metadata