amazon aurora dsql
Audited by Socket on Feb 27, 2026
1 alert found:
SecurityThis skill is a documentation/operational guide for managing Aurora DSQL via MCP and scripts. The content itself does not contain direct malicious code, downloads, or obfuscation, but it exposes high-risk operational capabilities (arbitrary SQL execution via transact, cluster management scripts, and use of IAM tokens). The most significant security concern is SQL injection risk because the skill explicitly states parameterized queries are not available and places input sanitization responsibility on callers. High-privilege actions (admin role use, cluster create/delete) are legitimate for DB administration but increase the blast radius if credentials or automation are compromised. Overall this is not confirmed malware, but it is a medium-to-high security-risk skill in operational contexts and should only be used with strict credential management, enforced least privilege, server-side protections (parameterized execution where possible), and human review for destructive actions.