The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill defines Lambda function handlers that ingest and process external data sources such as API Gateway request bodies and SQS message records, creating a potential surface for indirect injection if the data is not validated.
Ingestion points: The skill processes event.body in the Lambda handler (handler.js) and record.body in the SQS processor (processor.js).
Boundary markers: The provided snippets do not include instructions or delimiters to distinguish between untrusted input and system instructions.
Capability inventory: The logic includes file-system or network operations via the AWS SDK (DynamoDB client access).
Sanitization: The code performs basic JSON parsing but lacks explicit schema validation or data sanitization before processing.
[DATA_EXFILTRATION]: The Node.js Lambda handler pattern includes a response with Access-Control-Allow-Origin: '*'. This wildcard CORS policy is a common security misconfiguration that allows any external site to read responses from the API, potentially leading to unauthorized data exposure.

aws-serverless