aws-serverless
Pass
Audited by Gen Agent Trust Hub on Apr 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides standard architectural templates for AWS Lambda, API Gateway, and SQS. The provided code correctly demonstrates client initialization outside handler functions for connection reuse.
- [SAFE]: AWS SAM templates utilize managed policy templates, promoting least-privilege access to DynamoDB resources.
- [PROMPT_INJECTION]: The provided Lambda handler templates ingest untrusted data from event bodies (e.g., event.body in SKILL.md) and process it in database operations. While standard for serverless applications, this establishes an indirect prompt injection surface if the processed data influences subsequent agent logic. Ingestion points: event.body and record.body in SKILL.md. Boundary markers: None present in the code templates. Capability inventory: Interactions with DynamoDB via AWS SDKs. Sanitization: Standard JSON parsing is used without additional content validation.
Audit Metadata