aws-serverless
Pass
Audited by Gen Agent Trust Hub on Nov 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill contains legitimate architectural patterns for AWS cloud development. It references official and well-known libraries such as the AWS SDK for JavaScript and Boto3 for Python. IAM policies defined in the SAM templates use standard AWS Managed Policy templates (DynamoDBReadPolicy, DynamoDBCrudPolicy) and are restricted to specific resources.
- [INDIRECT_PROMPT_INJECTION]: The skill provides code for processing data from external AWS event sources (API Gateway request bodies and SQS message bodies). This is an inherent part of the intended functionality for serverless handlers.
- Ingestion points:
event.bodyinhandler.jsandrecord.bodyinprocessor.jsand the Python handler. - Boundary markers: Not included in the boilerplate snippets.
- Capability inventory: The skill performs operations against DynamoDB tables and logs message metadata.
- Sanitization: Standard JSON parsing is performed, but specific input validation logic is left to the implementer as per typical code templates.
Audit Metadata