ingesting-into-data-lake
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [Indirect Prompt Injection Surface]: The skill ingests data from external sources such as S3, JDBC databases, Snowflake, and BigQuery. This presents a potential surface where malicious instructions embedded in the data could influence the agent's behavior during the ingestion process or affect downstream applications.
- Ingestion points: Data ingestion workflows are detailed in
references/s3-files.md,references/jdbc-ingest.md,references/snowflake-ingest.md, andreferences/bigquery-ingest.md. - Boundary markers: The skill lacks explicit instructions or delimiters designed to isolate and prevent the execution of instructions contained within the ingested data.
- Capability inventory: The skill possesses capabilities to execute shell commands via the AWS CLI, perform Athena SQL queries, and trigger Glue PySpark jobs.
- Sanitization: While data type conversions are implemented in
references/type-transformations.md, these are intended for schema alignment rather than security-focused sanitization of input data. - [Dynamic Code Execution]: The skill generates and executes PySpark scripts within AWS Glue jobs to handle data transformations. The use of dynamic script generation is a standard practice for Glue ETL but represents a capability for code execution based on runtime input.
- Evidence: PySpark script templates and job configuration logic are provided in
references/glue-job-scripts.mdandreferences/glue-job-config.md.
Audit Metadata