sqs
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides standard AWS CLI commands for queue management, message operations, and monitoring (e.g.,
aws sqs,aws lambda,aws cloudwatch). These commands are intended for infrastructure orchestration and are standard for the skill's purpose. - [INDIRECT_PROMPT_INJECTION]: The skill provides patterns for processing external message data, which is an inherent vulnerability surface when the source of messages is untrusted.
- Ingestion points: SQS message retrieval via
sqs.receive_messageinSKILL.mdand Lambda event triggers inmessaging-patterns.md. - Boundary markers: None explicitly implemented in the code snippets provided.
- Capability inventory: The skill showcases capabilities for deleting messages, managing S3 objects (
s3.put_objectinmessaging-patterns.md), and creating/deleting temporary queues (sqs.create_queue,sqs.delete_queueinmessaging-patterns.md). - Sanitization: The provided examples demonstrate basic JSON deserialization (
json.loads) but lack validation, filtering, or escaping of message bodies before they are processed by the application logic.
Audit Metadata