aws-lambda-typescript-integration

Pass

Audited by Gen Agent Trust Hub on Apr 1, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides architectural patterns and deployment configurations that follow industry standards for serverless development.
  • [DATA_EXPOSURE_AND_EXFILTRATION]: No hardcoded credentials or sensitive data exposure was found. The skill correctly demonstrates the use of environment variables and AWS service integrations (SSM Parameter Store and Secrets Manager) for handling sensitive configuration.
  • [INDIRECT_PROMPT_INJECTION]: The skill identifies potential attack surfaces where untrusted data enters the application context.
  • Ingestion points: API Gateway request bodies, S3 event object keys, and SQS message bodies are identified in SKILL.md and references/raw-typescript-lambda.md.
  • Capability inventory: The architecture includes capabilities for data storage (DynamoDB), file storage (S3), and network communication (API Gateway).
  • Sanitization: The skill provides clear instructions in the 'Security Considerations' section of SKILL.md to treat all external event data as untrusted and to apply strict validation and sanitization.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 1, 2026, 07:09 AM