aws-sdk-java-v2-bedrock
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- Indirect Prompt Injection (LOW): The Java code templates provided in
advanced-model-patterns.mddemonstrate a pattern of direct string interpolation for prompts which can be exploited if untrusted data is processed.\n - Ingestion points: The
promptargument in theMultiModelService.invokeModelmethod and various helper functions inadvanced-model-patterns.md.\n - Boundary markers: The provided code lacks delimiters (such as XML tags or triple quotes) or system instructions to ignore embedded commands in the input data.\n
- Capability inventory: The code facilitates
invokeModeloperations against various powerful foundation models (Claude, Llama, Titan) via the BedrockRuntimeClient.\n - Sanitization: There is no evidence of input validation, escaping, or filtering before the prompt is embedded into the JSON payload.
Audit Metadata