rds
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The
scripts/setup.pyandscripts/lib/client.pyfiles usesubprocess.runto execute AWS CLI commands (such asaws rds generate-db-auth-tokenandaws sts get-caller-identity) and Python'spipmanager. These operations are essential for authenticating with AWS services and managing database connections. Additionally,scripts/setup.pyreads local AWS configuration files to list profiles, which is a standard procedure for AWS-integrated tools. - [EXTERNAL_DOWNLOADS]: The
scripts/setup.pyfile installs thepsycopg2-binarylibrary from the official Python Package Index (PyPI) if it is missing. This is a standard and well-known dependency for PostgreSQL interaction in Python. - [PROMPT_INJECTION]: The skill ingests data from external AWS RDS databases via scripts like
query.pyandsample.py. This creates a surface for indirect prompt injection if an attacker controls the database content. - Ingestion points: Database query results are loaded into the agent's context through scripts in the
scripts/directory. - Boundary markers: The skill does not implement specific boundary delimiters for processed database data, but provides strict SQL formatting instructions to the agent.
- Capability inventory: Subprocess calls for AWS CLI and pip are present in
scripts/setup.pyandscripts/lib/client.py. - Sanitization: The
validate_sqlfunction inscripts/lib/client.pyprevents multi-statement queries and enforces write-mode constraints.
Audit Metadata