aws-lambda-python-integration

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill documents the installation and use of several standard Python and Node.js packages for serverless development. These include well-known libraries such as chalice, boto3, requests, pydantic, pytest, moto, and the serverless framework. The references point to official repositories and standard registries (NPM/PyPI).
  • [COMMAND_EXECUTION]: The skill provides numerous examples of using command-line interfaces (CLIs) like chalice, sam, and serverless for project initialization, local testing, and deployment. These tools are integral to the serverless development workflow described in the skill.
  • [INDIRECT_PROMPT_INJECTION]: The skill demonstrates patterns for handling external data from AWS event sources (API Gateway, S3, SQS). It mitigates injection risks by explicitly recommending and providing code examples for input validation, sanitization, and the use of libraries like pydantic for schema enforcement.
  • Ingestion points: Event data enters through the lambda_handler(event, context) entry point in SKILL.md and references/raw-python-lambda.md.
  • Boundary markers: The instructions explicitly state to "Validate all input data" and "Always validate and sanitize event data."
  • Capability inventory: The skill uses Bash for CLI operations and Write/Edit for project file management.
  • Sanitization: Code examples demonstrate parsing JSON bodies and using structured classes for configuration and data validation.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 09:08 PM
Security Audit — agent-trust-hub — aws-lambda-python-integration