opensearch-personalize-caching-strategies
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious code, persistence mechanisms, or unauthorized privilege escalation patterns were detected. The skill's primary function is as a technical distillation of caching best practices for AWS environments.
- [EXTERNAL_DOWNLOADS]: The metadata and reference files include technical links to well-known technology organizations and trusted sources, including AWS, GitHub repositories for Netflix and Pinterest engineering, and various RFC/academic standards. These are intended for developer reference and do not involve the automated execution of untrusted remote code.
- [DATA_EXFILTRATION]: Code templates illustrate patterns for interacting with AWS S3 buckets to store and retrieve data like Bloom filters, log snapshots, and cache keys. These operations are within the scope of the described caching and observability features and do not represent a data exfiltration threat.
- [INDIRECT_PROMPT_INJECTION]: The skill provides code for processing search queries and personalized recommendation inputs. While this represents a data ingestion surface, the templates advocate for strong canonicalization and filtering of inputs, which aligns with security best practices for search and recommendation systems.
Audit Metadata