aws-health-events
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [Indirect Prompt Injection Surface]: The skill processes event descriptions and resource metadata retrieved from the AWS Health API in files such as SKILL.md (Steps 2, 4, and 5). This external data is interpolated into the agent's context, creating a potential surface for indirect prompt injection. While the skill lacks explicit boundary markers for this data, it implements a 256-character summary limit for descriptions in Step 7. The skill maintains restricted capabilities by utilizing only specific AWS Health CLI commands.
Audit Metadata