aws-rds
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill documents multiple AWS CLI commands for creating, modifying, and deleting RDS instances, snapshots, and parameter groups. These commands are intended for infrastructure management and require high-privilege IAM permissions to execute.
- [COMMAND_EXECUTION]: The documentation includes instructions for retrieving database master passwords from AWS Secrets Manager using the
aws secretsmanager get-secret-valuecommand as part of the managed password workflow. - [INDIRECT_PROMPT_INJECTION]: The skill facilitates the capture of output from AWS CLI commands (e.g., using
--queryto extract ARNs, endpoints, or secret values) for use in subsequent steps of the database management workflow. - Ingestion points: Output from
aws rds describe-db-instancesandaws secretsmanager get-secret-value(SKILL.md). - Boundary markers: No specific delimiters or explicit safety instructions are provided to the agent for handling these external command outputs.
- Capability inventory: The skill leverages the AWS CLI for infrastructure management, monitoring, and credential retrieval.
- Sanitization: No explicit sanitization or validation of the CLI output is described before the data is processed or displayed by the agent.
Audit Metadata