aws-sst-development
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The skill includes a pattern for modifying generated Lambda bundle files using filesystem operations. This is presented as a reactive fix for specific esbuild and Node.js runtime compatibility issues.
- [INDIRECT_PROMPT_INJECTION]: The skill's workflow involves ingesting and analyzing local project files like sst.config.ts and package.json. Evidence:
- Ingestion points: sst.config.ts, infra/*.ts
- Boundary markers: Absent
- Capability inventory: npx sst deploy, fs.writeFile
- Sanitization: Absent
- [COMMAND_EXECUTION]: The skill facilitates the use of development CLI tools, including sst, aws, vitest, and tsc, for deploying infrastructure and validating configuration.
Audit Metadata