AGENT LAB: SKILLS

aws-sdk-java-v2-bedrock

Pass

Audited by Gen Agent Trust Hub on Feb 17, 2026

Risk Level: SAFEPROMPT_INJECTION
Full Analysis
  • Indirect Prompt Injection (LOW): The Java code templates provided in advanced-model-patterns.md demonstrate a pattern of direct string interpolation for prompts which can be exploited if untrusted data is processed.\n
  • Ingestion points: The prompt argument in the MultiModelService.invokeModel method and various helper functions in advanced-model-patterns.md.\n
  • Boundary markers: The provided code lacks delimiters (such as XML tags or triple quotes) or system instructions to ignore embedded commands in the input data.\n
  • Capability inventory: The code facilitates invokeModel operations against various powerful foundation models (Claude, Llama, Titan) via the BedrockRuntimeClient.\n
  • Sanitization: There is no evidence of input validation, escaping, or filtering before the prompt is embedded into the JSON payload.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 17, 2026, 04:54 PM