aws-rds

Pass

Audited by Gen Agent Trust Hub on Oct 4, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill documents multiple AWS CLI commands for creating, modifying, and deleting RDS instances, snapshots, and parameter groups. These commands are intended for infrastructure management and require high-privilege IAM permissions to execute.
  • [COMMAND_EXECUTION]: The documentation includes instructions for retrieving database master passwords from AWS Secrets Manager using the aws secretsmanager get-secret-value command as part of the managed password workflow.
  • [INDIRECT_PROMPT_INJECTION]: The skill facilitates the capture of output from AWS CLI commands (e.g., using --query to extract ARNs, endpoints, or secret values) for use in subsequent steps of the database management workflow.
  • Ingestion points: Output from aws rds describe-db-instances and aws secretsmanager get-secret-value (SKILL.md).
  • Boundary markers: No specific delimiters or explicit safety instructions are provided to the agent for handling these external command outputs.
  • Capability inventory: The skill leverages the AWS CLI for infrastructure management, monitoring, and credential retrieval.
  • Sanitization: No explicit sanitization or validation of the CLI output is described before the data is processed or displayed by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 4, 2026, 08:51 AM