aws-ses-inbound
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends installing the
awsclipackage via official channels such as Homebrew or Pip. This is a well-known tool provided by Amazon Web Services for cloud resource management. - [INDIRECT_PROMPT_INJECTION]: The skill facilitates the setup of an infrastructure pipeline where untrusted data (inbound emails) is ingested into the agent context through SNS webhooks.
- Ingestion points: Inbound raw MIME email content delivered via SNS HTTPS endpoints (SKILL.md).
- Boundary markers: None explicitly defined in the setup documentation for the email body content.
- Capability inventory: The skill focuses on AWS CLI infrastructure setup; there are no instructions to execute or parse the untrusted email content within the skill itself.
- Sanitization: The skill includes clear instructions for verifying SNS message signatures to ensure the authenticity and integrity of the incoming data.
Audit Metadata