step-functions
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides patterns for processing external input through Amazon States Language (ASL) to orchestrate various AWS services. While this creates a surface for indirect injection, it is the primary function of the technology described.
- Ingestion points: The
inputparameter instart_executioncalls and thefile://workflow.jsonconfiguration in CLI examples. - Boundary markers: None explicit in the examples; workflows are shown processing raw JSON paths (e.g.,
$.order_id). - Capability inventory: The orchestrated tasks include executing Lambda functions, writing to DynamoDB, sending SQS/SNS messages, and running ECS tasks.
- Sanitization: No explicit validation or sanitization logic is included in the instructional examples, which is standard for architectural documentation.
- [COMMAND_EXECUTION]: The skill utilizes official AWS CLI commands for state machine management and debugging.
- Evidence: Examples include
aws stepfunctions create-state-machine,aws stepfunctions get-execution-history, andaws stepfunctions validate-state-machine-definition.
Audit Metadata