skills/aws/agent-toolkit-for-aws/processing-s3-uploads-with-step-functions/Snyk

processing-s3-uploads-with-step-functions

Warn

Audited by Snyk on Sep 4, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (medium risk: 0.30). The workflow sets up an S3 bucket with EventBridge notifications that trigger a Step Functions state machine and downstream Lambda/Fargate processors when objects are uploaded, meaning outsider-authored free text in uploaded S3 objects is consumed by the infrastructure created by the agent.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Sep 4, 2026, 04:05 AM

Issues

1

Security Audit — snyk — processing-s3-uploads-with-step-functions