aws-sam-local-testing
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill documents the use of official AWS SAM tools and integrates with well-known services like GitHub Actions and LocalStack. All external references point to official documentation or established developer resources.- [COMMAND_EXECUTION]: The skill provides examples for running
samcommands via the shell and Python'ssubprocessmodule. The Python examples follow secure patterns by passing arguments as a list rather than a shell string, minimizing command injection risks during local testing.- [INDIRECT_PROMPT_INJECTION]: The skill outlines a workflow where the agent processes external event payloads (e.g.,event.json) to simulate Lambda triggers. While this represents a surface for ingesting untrusted data, the processing is contained within the local SAM emulation environment and is a core part of the intended functionality. Findings for this category are considered low risk.
Audit Metadata