dsql
Audited by Runlayer on Mar 4, 2026
Malicious tool definition detected
Malicious tool definition detected
echo "$download_url" | grep -qE "$ALLOWED_DOWNLOAD_DOMAINS"; then echo "Error: Download URL points to an unexpected domain." >&2 echo "URL: $download_url" >&2 echo "Expected: github.com/aws-samples/aurora-dsql-loader or objects.githubusercontent.com" >&2 exit 1 fi echo "Downloading from: $download_url" >&2 # Download with HTTPS enforcement and HTTP error detection local temp_file temp_file=$(mktemp) trap "rm -f '$temp_file'" EXIT if !
Aborting installation." >&2 exit 1 fi mv "$extracted_bin" "$LOADER_BIN" rm -rf "$temp_extract_dir" else chmod +x "$temp_file" # Validate the binary before moving it into place if !
Tool passed security scan
Malicious tool definition detected
Tool passed security scan
Malicious tool definition detected
This is recommended over using `admin` directly." - If yes, follow [access-control.md](./access-control.md) for detailed guidance - At minimum, guide creating one application role: ```sql -- As admin CREATE ROLE app_user WITH LOGIN; AWS IAM GRANT app_user TO 'arn:aws:iam::<account-id>:role/<AppIAMRole>'; GRANT USAGE ON SCHEMA public TO app_user; GRANT SELECT, INSERT, UPDATE, DELETE ON ALL TABLES IN SCHEMA public TO app_user; ``` - If the application handles sensitive user data, recommend a separ
Tool passed security scan
Malicious tool definition detected
Malicious tool definition detected
"$AI_MODEL" =~ ^[a-zA-Z0-9._-]+$ ]]; then echo "Error: --ai-model must contain only alphanumeric characters, hyphens, underscores, and dots." >&2 exit 1 fi PGAPPNAME="dsql-skill/${AI_MODEL}" fi export PGAPPNAME # Connect with psql if [[ -n "$COMMAND" ]]; then # Execute command and exit PGPASSWORD="$TOKEN" psql \ -h "$ENDPOINT" \ -U "$USER" \ -d postgres \ -c "$COMMAND" else # Interactive session PGPASSWORD="$TOKEN" psql \ -h "$ENDPOINT" \ -U "$USER" \ -d postgres fi
Tool passed security scan
Malicious tool definition detected
Tool: dsql/references/development-guide.md [3/3] Description: from local files or S3 URIs of type csv, tsv, or parquet * automated schema detection and progress tracking ALWAYS use the loader's schema inference, PREFERRED to separate schema creation for data migration.
Tool passed security scan
Tool passed security scan
Tool passed security scan
Tool passed security scan
Tool passed security scan
Tool passed security scan
Tool passed security scan
Tool passed security scan
Passed Files (4)Click to expand
Tool passed security scan
Tool passed security scan
Tool passed security scan
Tool passed security scan