aws-serverless
Pass
Audited by Gen Agent Trust Hub on Nov 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The provided code patterns for AWS Lambda, SQS, and DynamoDB Streams ingest untrusted data from external event sources, which creates a vulnerability surface for indirect prompt injection.
- Ingestion points: Data enters the agent context through 'event.body' in API Gateway handlers, 'record.body' in SQS processors, and DynamoDB Stream records as seen in 'references/detailed-guide.md'.
- Boundary markers: The example handlers do not implement boundary markers or instructions to ignore embedded prompts in the processed data.
- Capability inventory: The skill demonstrates capabilities for database writes (DynamoDB), file storage (S3), and network responses (API Gateway).
- Sanitization: Validation is focused on structural integrity and data types rather than sanitizing for natural language instructions.
- [EXTERNAL_DOWNLOADS]: The guide references the installation of official development tools from well-known sources.
- Evidence: Instructions to install 'aws-sam-cli' via pip and 'aws-cdk' via npm are included in 'references/detailed-guide.md'. These are official tools from Amazon Web Services.
Audit Metadata