aws-lambda-python-integration
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documents the installation and use of several standard Python and Node.js packages for serverless development. These include well-known libraries such as
chalice,boto3,requests,pydantic,pytest,moto, and theserverlessframework. The references point to official repositories and standard registries (NPM/PyPI). - [COMMAND_EXECUTION]: The skill provides numerous examples of using command-line interfaces (CLIs) like
chalice,sam, andserverlessfor project initialization, local testing, and deployment. These tools are integral to the serverless development workflow described in the skill. - [INDIRECT_PROMPT_INJECTION]: The skill demonstrates patterns for handling external data from AWS event sources (API Gateway, S3, SQS). It mitigates injection risks by explicitly recommending and providing code examples for input validation, sanitization, and the use of libraries like
pydanticfor schema enforcement. - Ingestion points: Event data enters through the
lambda_handler(event, context)entry point inSKILL.mdandreferences/raw-python-lambda.md. - Boundary markers: The instructions explicitly state to "Validate all input data" and "Always validate and sanitize event data."
- Capability inventory: The skill uses
Bashfor CLI operations andWrite/Editfor project file management. - Sanitization: Code examples demonstrate parsing JSON bodies and using structured classes for configuration and data validation.
Audit Metadata