awsclaw-glue
Pass
Audited by Gen Agent Trust Hub on Apr 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill defines tools for full lifecycle management of AWS Glue infrastructure. Key operations include CreateJob, UpdateJob, DeleteJob, CreateDatabase, DeleteDatabase, and StartJobRun. These commands allow significant control over cloud data processing resources.
- [PROMPT_INJECTION]: The skill possesses an indirect prompt injection attack surface by reading external resource metadata which could contain adversarial instructions. * Ingestion points: Data catalog metadata retrieved via GetTable, GetDatabases, and GetJob commands. * Boundary markers: None present to distinguish between trusted instructions and untrusted metadata. * Capability inventory: High-impact actions such as DeleteJob, DeleteDatabase, and StartJobRun are available to the agent. * Sanitization: The skill does not specify any validation or sanitization of strings fetched from the Glue environment.
Audit Metadata