prompt-library-for-startups
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides links and instructions to download installable agents from the
aws-samplesandawslabsGitHub organizations. These are official and trusted sources belonging to Amazon/AWS. References to these sources are documented neutrally as they are well-known services within the author's ecosystem. - [COMMAND_EXECUTION]: Several prompt templates (e.g., AWS CDK TypeScript Pipeline Generator, ECS Express Deployment Assistant) instruct the agent to use CLI tools like
aws,cdk,npm, anddocker. These are standard tools for the intended development and deployment use cases. The instructions explicitly include safety boundaries, such as requiring user confirmation for resource changes viacdk diffand strictly prohibiting broad IAM permissions. - [INDIRECT_PROMPT_INJECTION]: The
ai-support-ticket-triage-and-routing-assistant.mdtemplate defines a surface for processing untrusted customer support tickets. The skill implements proactive mitigation by including explicit boundary instructions that tell the AI to treat the input strictly as data and to ignore any commands or overrides embedded within the ticket text. - [SAFE]: The skill is authored by
awslabs, a trusted vendor. It consistently promotes high-standard security best practices, including the mandatory use of AWS Secrets Manager, strict IAM least-privilege policies, and root account MFA protection. No malicious patterns, obfuscation, or persistence mechanisms were detected. The skill's primary purpose is education and scaffolding, and its instructions align with these goals.
Audit Metadata