dsql
Pass
Audited by Gen Agent Trust Hub on May 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill facilitates the installation and execution of the Aurora DSQL MCP server from the 'awslabs' organization using the
uvxtool runner. It further references and instructs the installation of various database connectors, ORMs, and drivers from official GitHub repositories (e.g.,aws-samples/aurora-dsql-samples,awslabs/aurora-dsql-python-connector) and standard package registries like NPM and PyPI. - [COMMAND_EXECUTION]: The skill provides numerous instructions for the agent to execute shell commands. These include AWS CLI operations for cluster management (
aws dsql), database connectivity viapsql, and environment configuration tasks such as reading and writing to.envfiles for endpoint management. - [PROMPT_INJECTION]: Because some Aurora DSQL tools do not support parameterized queries, the skill processes SQL queries constructed from user input. However, the documentation (specifically in
mcp/tools/input-validation.md) explicitly addresses this risk by instructing the agent to perform strict input validation using regex, allowlists, and quote escaping before executing any generated SQL.
Audit Metadata