creating-data-lake-table
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- AWS Infrastructure Command Execution: The skill provides instructions for executing AWS CLI commands (
aws s3tables,aws glue,aws athena) and SQL DDL statements to manage data lake resources. While these commands interact with cloud infrastructure, the skill includes guidance on using MCP server tools for command validation and audit logging to ensure operations are performed within a controlled environment. - Policy and Access Control Management: The instructions involve the configuration of IAM policies and S3 bucket policies. To support secure resource management, the skill explicitly directs the agent to apply least-privilege permissions and requires manual confirmation from the user before modifying sensitive access controls or IAM roles.
- Processing of User-Provided Specifications: The skill ingests user input for table names and schema descriptions. This functionality is accompanied by validation rules, such as naming constraints and type verification, which help ensure that the generated infrastructure configurations are valid and consistent with Iceberg best practices.
Audit Metadata