skills/awslabs/mcp/aws dsql/Gen Agent Trust Hub

aws dsql

Pass

Audited by Gen Agent Trust Hub on Sep 17, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides automated and manual workflows for cluster management and database interaction. This includes a psql fallback script that generates temporary IAM authentication tokens and uses environment variables for secure credential handling during query execution.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to handle external SQL input from various sources. It implements a robust defense-in-depth strategy by requiring the agent to use dsql_lint for syntax and safety validation and a dedicated safe_query builder to prevent injection attacks when constructing dynamic queries.
  • [SAFE]: The skill follows least-privilege principles by encouraging the use of scoped database roles and tenant-specific isolation. The implementation is consistent with its stated purpose of providing a developer-focused interface for Amazon Aurora DSQL.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 17, 2026, 09:40 PM