amazon-opensearch-service
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- Credential Management: The skill provides exemplary guidance on handling sensitive information. It explicitly instructs the agent never to include master usernames, KMS key ARNs, or account IDs in generated output. Furthermore, it recommends retrieving credentials from AWS Secrets Manager at runtime rather than hardcoding them in scripts or configuration files.
- Command Execution: The skill uses standard AWS CLI and
awscurlcommands for infrastructure and data-plane operations. While it includes Python scripts for data exploration, these are scoped to the intended functionality of interacting with OpenSearch APIs and use standard mechanisms for authenticated requests. - Security Best Practices: A dedicated reference file (
security.md) outlines a three-layer security model (Network, Domain Access Policy, and Fine-Grained Access Control). It provides checklists for assessment reports and warns against insecure defaults, such as public endpoints without IP allowlisting. - External References: The skill fetches documentation and configuration from official, well-known sources including the OpenSearch Project and AWS documentation. These references are used to provide the user with the most current and accurate information.
- Indirect Prompt Injection Awareness: The skill includes instructions to validate and sanitize user input before sending it to AI capabilities, reducing the risk of prompt injection from untrusted sources.
Audit Metadata