skills/awslabs/agent-plugins/dsql/Gen Agent Trust Hub

dsql

Pass

Audited by Gen Agent Trust Hub on May 13, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill facilitates the installation and execution of the Aurora DSQL MCP server from the 'awslabs' organization using the uvx tool runner. It further references and instructs the installation of various database connectors, ORMs, and drivers from official GitHub repositories (e.g., aws-samples/aurora-dsql-samples, awslabs/aurora-dsql-python-connector) and standard package registries like NPM and PyPI.
  • [COMMAND_EXECUTION]: The skill provides numerous instructions for the agent to execute shell commands. These include AWS CLI operations for cluster management (aws dsql), database connectivity via psql, and environment configuration tasks such as reading and writing to .env files for endpoint management.
  • [PROMPT_INJECTION]: Because some Aurora DSQL tools do not support parameterized queries, the skill processes SQL queries constructed from user input. However, the documentation (specifically in mcp/tools/input-validation.md) explicitly addresses this risk by instructing the agent to perform strict input validation using regex, allowlists, and quote escaping before executing any generated SQL.
Audit Metadata
Risk Level
SAFE
Analyzed
May 13, 2026, 06:26 PM