querying-aws-redshift
Pass
Audited by Gen Agent Trust Hub on Aug 19, 2026
Risk Level: SAFE
Full Analysis
- [Data Sensitivity Management]: The skill enables access to Redshift system logs, which can contain sensitive connection and query metadata. It provides comprehensive remediation guidance, including instructions for customer-managed KMS keys, encrypted Athena workgroups, and Lake Formation column-level security to minimize exposure risks.
- [Secure Configuration Practices]: The provided templates for IAM roles and Lake Formation settings incorporate security best practices, such as using condition keys to prevent confused-deputy attacks and explicit warnings regarding the scope of administrative permissions.
- [Indirect Prompt Injection Surface]: The skill processes user-controlled SQL text from Redshift logs (Ingestion points: SKILL.md). It encourages the use of boundary markers like SQL quoting and LIMIT clauses (SKILL.md). The skill capabilities are focused on log auditing via AWS service APIs (SKILL.md). Sanitization is achieved through recommended Lake Formation column-level permissions (references/security.md).
Audit Metadata