aws dsql
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides automated and manual workflows for cluster management and database interaction. This includes a
psqlfallback script that generates temporary IAM authentication tokens and uses environment variables for secure credential handling during query execution. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to handle external SQL input from various sources. It implements a robust defense-in-depth strategy by requiring the agent to use
dsql_lintfor syntax and safety validation and a dedicatedsafe_querybuilder to prevent injection attacks when constructing dynamic queries. - [SAFE]: The skill follows least-privilege principles by encouraging the use of scoped database roles and tenant-specific isolation. The implementation is consistent with its stated purpose of providing a developer-focused interface for Amazon Aurora DSQL.
Audit Metadata