sam-template-builder
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process user requests to generate AWS Serverless Application Model (SAM) configurations and code, while utilizing powerful tools.
- Ingestion points: The skill ingests user queries and requests regarding "sam template builder" patterns and AWS service configurations (SKILL.md).
- Boundary markers: No specific delimiters or instructions are present to prevent the agent from following malicious instructions that might be embedded within user-provided templates or descriptions.
- Capability inventory: The skill has access to file system tools (
Read,Write,Edit) and shell execution (Bash(aws:*)), which provides a significant action surface if the agent is influenced by untrusted input. - Sanitization: The instructions do not specify any validation or sanitization routines for user-provided data before it is processed or used in shell commands.
Audit Metadata