aws-lambda-php-integration
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructions involve installing industry-standard dependencies such as the Bref framework via Composer and the Serverless Framework via npm. These are well-known tools in the PHP serverless ecosystem.
- [INDIRECT_PROMPT_INJECTION]: The templates provided for AWS Lambda handlers (e.g., in
public/index.php) ingest untrusted data from web events, such as request bodies and path parameters. This is an inherent architectural surface for web-facing applications. - Ingestion points: Request handling logic in
public/index.php,src/Kernel.php, andsrc/Services/UserService.phpacross various reference files. - Boundary markers: The provided code snippets do not implement specific boundary markers or delimiters for untrusted input.
- Capability inventory: Handlers demonstrate capabilities to perform CRUD operations on DynamoDB and S3, and interact with SQS/SNS triggers.
- Sanitization: The skill includes explicit security guidance in
SKILL.mdandreferences/best-practices.md, advising users to validate all input data and adhere to the principle of least privilege for IAM policies.
Audit Metadata