sqs

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides standard AWS CLI commands for queue management, message operations, and monitoring (e.g., aws sqs, aws lambda, aws cloudwatch). These commands are intended for infrastructure orchestration and are standard for the skill's purpose.
  • [INDIRECT_PROMPT_INJECTION]: The skill provides patterns for processing external message data, which is an inherent vulnerability surface when the source of messages is untrusted.
  • Ingestion points: SQS message retrieval via sqs.receive_message in SKILL.md and Lambda event triggers in messaging-patterns.md.
  • Boundary markers: None explicitly implemented in the code snippets provided.
  • Capability inventory: The skill showcases capabilities for deleting messages, managing S3 objects (s3.put_object in messaging-patterns.md), and creating/deleting temporary queues (sqs.create_queue, sqs.delete_queue in messaging-patterns.md).
  • Sanitization: The provided examples demonstrate basic JSON deserialization (json.loads) but lack validation, filtering, or escaping of message bodies before they are processed by the application logic.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 07:14 PM