awsclaw-dynamodb
Pass
Audited by Gen Agent Trust Hub on Apr 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns such as obfuscation, hardcoded credentials, unauthorized persistence, or privilege escalation were detected.
- [PROMPT_INJECTION]: The skill exhibits an attack surface for indirect prompt injection because it is designed to process external data retrieved from a database.
- Ingestion points: Untrusted data enters the agent context through
Query,Scan, andGetItemoperations (SKILL.md). - Boundary markers: The instructions do not specify any delimiters or safety markers to isolate retrieved data from system instructions.
- Capability inventory: The skill has significant capabilities, including the ability to create/delete tables and modify database items across the AWS environment (SKILL.md).
- Sanitization: There is no evidence of sanitization or validation of the data retrieved from the tables before it is processed by the agent.
Audit Metadata