aws-lambda-typescript-integration
Pass
Audited by Gen Agent Trust Hub on Mar 25, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill serves as an educational and procedural resource for AWS Lambda development and does not contain any malicious instructions or hidden payloads.- [SAFE]: Sensitive data such as API keys and database credentials are managed correctly through environment variable placeholders and AWS Secrets Manager integration, avoiding hardcoded secrets.- [SAFE]: IAM policy templates in the deployment guides (SAM and Serverless Framework) are restrictive and follow the principle of least privilege, targeting specific resources like DynamoDB tables and S3 buckets.- [EXTERNAL_DOWNLOADS]: The skill references standard installation procedures for well-known tools like the AWS SAM CLI from official sources (GitHub). This is a safe development practice.- [SAFE]: The skill explicitly warns about the risks of processing untrusted data and provides implementation guidelines for sanitizing inputs from API Gateway, S3, and SQS events to mitigate indirect prompt injection vulnerabilities.
- Ingestion points: API Gateway Proxy Events, S3 Event Objects, SQS Message Payloads (SKILL.md, raw-typescript-lambda.md).
- Boundary markers: Instructions mandate explicit validation and schema checks for all incoming external data.
- Capability inventory: The skill utilizes the Bash tool for deployment and generates code with S3, DynamoDB, and network access capabilities.
- Sanitization: Provided under the Security Considerations section in SKILL.md and through validation logic examples in reference files.
Audit Metadata