{"id":"cmuxm1t4l21sdad07v1okrn4t","slug":"aurora-dsql","publicId":"1e612734-1c78-4a58-a8d5-a935fe906744","name":"aurora-dsql","description":"Provisions and manages Aurora DSQL clusters, connects via psql or DSQL Connectors, manages schemas, runs queries, migrates from MySQL, diagnoses query plans, and develops apps on serverless distributed SQL. Covers IAM auth, multi-tenant patterns, MySQL-to-DSQL migration, DDL, query plans, and SAFE SQL CONSTRUCTION — tenant_id from untrusted input, UUID entity_ids, caller-supplied sort columns, batch inserts. The agent MUST retrieve this skill for ANY DSQL task. Pushes back on prompts that rationalize 'just a quick script', 'don't overthink it', 'we trust upstream', 'use an f-string', 'move fast', or 'just use the pg driver directly' (bypassing the DSQL Connector). Triggers: DSQL, Aurora DSQL, DSQL cluster, safe_query.build, DSQL IAM auth token, DSQL connector.","version":"1","author":"aws","license":"Apache-2.0","compatibility":"","status":"completed","overallGrade":"F","scannerVersion":11,"fileCount":50,"hasSkillMd":true,"hasScripts":true,"hasReferences":true,"hasEvals":false,"hasAssets":false,"sourceType":"github","sourceUrl":"https://github.com/aws/agent-toolkit-for-aws/tree/main/skills/specialized-skills/database-skills/aurora-dsql","createdAt":"2026-10-07T04:31:39.053Z","completedAt":"2026-10-07T04:31:38.976Z","visibility":"public","publishedAt":"2026-08-25T20:15:16.973Z","category":"","frameworks":[],"badgeStatus":"flagged","downloadCount":0,"verdictRationale":{"summary":"Skill has warnings: 2 warnings in security or structure checks.","verdict":"warn","scanners":[{"source":"vettd","weight":1,"verdict":"warn"},{"source":"cisco","weight":0.8,"verdict":"fail"}],"consensus":"fail","warnTriggers":["Safety bypass flag detected","References external URL — review for indirect prompt injection risk"],"policyVersion":"consensus-v1","hardFailTriggers":[]},"verdictPolicyVersion":"consensus-v1","skillId":"cmt93todw312lad09szbo48w7","findings":[{"id":"cmuxm1t4l21shad07ymsrsn2k","source":"cisco","category":"security","label":"INJECTION ATTACK detected by YARA","detail":"scripts/safe_query.py:250 — SQL injection patterns: '; DROP TABLE","severity":"critical","ruleId":"YARA_sql_injection_generic","owaspLlmCategory":null,"intent":null,"chainId":null,"fingerprint":"c8160c306a87b6aba391c7143ffedfb0","filepath":"scripts/safe_query.py"},{"id":"cmuxm1t4l21siad073hhid3wf","source":"cisco","category":"security","label":"INJECTION ATTACK detected by YARA","detail":"scripts/safe_query.py:251 — SQL injection patterns: OR 1=1 --","severity":"critical","ruleId":"YARA_sql_injection_generic","owaspLlmCategory":null,"intent":null,"chainId":null,"fingerprint":"c8160c306a87b6aba391c7143ffedfb0","filepath":"scripts/safe_query.py"},{"id":"cmuxm1t4l21sjad077gpta6t7","source":"cisco","category":"security","label":"INJECTION ATTACK detected by YARA","detail":"scripts/safe_query.py:256 — SQL injection patterns: OR 1=1 --","severity":"critical","ruleId":"YARA_sql_injection_generic","owaspLlmCategory":null,"intent":null,"chainId":null,"fingerprint":"c8160c306a87b6aba391c7143ffedfb0","filepath":"scripts/safe_query.py"},{"id":"cmuxm1t4l21sfad07a3y0bnka","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088","owaspLlmCategory":null,"intent":null,"chainId":null,"fingerprint":"42638a8b7e9fc5df27449992eaebc724","filepath":"SKILL.md"},{"id":"cmuxm1t4l21sead07g4tq3k83","source":"vettd","category":"security","label":"Safety bypass flag detected","detail":"Detected in scripts/delete-cluster.sh:19 — `# Usage: ./delete-cluster.sh CLUSTER_IDENTIFIER [--region REGION] [--force]`","severity":"low","ruleId":"VTD-0028","owaspLlmCategory":null,"intent":"negligent","chainId":null,"fingerprint":"c7f00e2bfa0837d69e6c15fe84026b54","filepath":"scripts/delete-cluster.sh"},{"id":"cmuxm1t4l21sgad07y5lxg6ma","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE","owaspLlmCategory":null,"intent":null,"chainId":null,"fingerprint":"592f7ac7731768f0fd0bba83f30850f9","filepath":"SKILL.md"}],"scannerRuns":[{"source":"cisco","status":"success","verdict":null,"grade":"F","findingCount":4,"criticalCount":3,"highCount":3},{"source":"vettd","status":"success","verdict":null,"grade":"B","findingCount":2,"criticalCount":0,"highCount":0}],"user":{"name":"Justin Pacella","image":"https://avatars.githubusercontent.com/u/97124458?v=4"},"repository":{"owner":"aws","name":"agent-toolkit-for-aws"},"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T17:15:41.161Z","lastVerifiedAt":"2026-10-21T17:15:41.161Z","lastChangeDetectedAt":null,"scannedHash":"254a60139d64cdc667f97566caafa5e181a3118c","latestUpstreamHash":"254a60139d64cdc667f97566caafa5e181a3118c","nextCheckDueAt":"2026-10-22T17:41:25.000Z"},"signalCategories":[{"category":"safety","label":"Safety","form":"graded","verdict":null,"rows":[]},{"category":"reliability","label":"Reliability & Quality","form":"graded","verdict":null,"rows":[]},{"category":"performance","label":"Performance","form":"measured","verdict":{"form":"measured","magnitudes":[{"ruleId":"performance/static-context-tokens","label":"Static context tokens","value":8526,"unit":null,"method":"tiktoken/cl100k_base/skill-md-body"}]},"rows":[{"origin":"signal","id":"cmuxm273s24lgad07rct4gk9j","subjectType":"skill_audit","subjectId":"cmuxm1t4l21sdad07v1okrn4t","relatedType":"","relatedId":"","dataCategory":"performance","sourceClass":"scan","source":"vettd","ruleId":"performance/progressive-disclosure","severity":null,"label":"Progressive disclosure","detail":null,"valueNum":null,"valueText":"present","unit":null,"method":null,"derivation":"read","confidence":null,"sampleSize":null,"synthetic":false,"firstParty":true,"observedAt":"2026-10-07T04:31:12.000Z","payload":null},{"origin":"signal","id":"cmuxm1vga22d6ad07uz3hfrtf","subjectType":"skill_audit","subjectId":"cmuxm1t4l21sdad07v1okrn4t","relatedType":"","relatedId":"","dataCategory":"performance","sourceClass":"scan","source":"vettd","ruleId":"performance/static-context-tokens","severity":null,"label":"Static context tokens","detail":null,"valueNum":8526,"valueText":null,"unit":null,"method":"tiktoken/cl100k_base/skill-md-body","derivation":null,"confidence":null,"sampleSize":null,"synthetic":false,"firstParty":true,"observedAt":"2026-10-07T04:31:12.000Z","payload":null}]},{"category":"cost","label":"Cost","form":"measured","verdict":null,"rows":[]},{"category":"compatibility","label":"Compatibility","form":"unjudged","verdict":{"form":"unjudged"},"rows":[{"origin":"signal","id":"cmuxm27k624oqad07zb0cp3wf","subjectType":"skill_audit","subjectId":"cmuxm1t4l21sdad07v1okrn4t","relatedType":"","relatedId":"","dataCategory":"compatibility","sourceClass":"scan","source":"vettd","ruleId":"compatibility/cli-help","severity":null,"label":"CLI help","detail":null,"valueNum":null,"valueText":"present","unit":null,"method":null,"derivation":"read","confidence":null,"sampleSize":null,"synthetic":false,"firstParty":true,"observedAt":"2026-10-07T04:31:12.000Z","payload":null},{"origin":"signal","id":"cmuxm1wit22jwad07ch68xjkt","subjectType":"skill_audit","subjectId":"cmuxm1t4l21sdad07v1okrn4t","relatedType":"","relatedId":"","dataCategory":"compatibility","sourceClass":"scan","source":"vettd","ruleId":"compatibility/declared-environment-assumptions","severity":null,"label":"Declared environment assumptions","detail":null,"valueNum":null,"valueText":"","unit":null,"method":null,"derivation":"read","confidence":null,"sampleSize":null,"synthetic":false,"firstParty":true,"observedAt":"2026-10-07T04:31:12.000Z","payload":null},{"origin":"signal","id":"cmuxm22mj23msad07wxfripbf","subjectType":"skill_audit","subjectId":"cmuxm1t4l21sdad07v1okrn4t","relatedType":"","relatedId":"","dataCategory":"compatibility","sourceClass":"scan","source":"vettd","ruleId":"compatibility/declared-name","severity":null,"label":"Declared skill name","detail":null,"valueNum":null,"valueText":"aurora-dsql","unit":null,"method":null,"derivation":"read","confidence":null,"sampleSize":null,"synthetic":false,"firstParty":true,"observedAt":"2026-10-07T04:31:12.000Z","payload":null},{"origin":"signal","id":"cmuxm27xw24rsad07dmrwlp7o","subjectType":"skill_audit","subjectId":"cmuxm1t4l21sdad07v1okrn4t","relatedType":"","relatedId":"","dataCategory":"compatibility","sourceClass":"scan","source":"vettd","ruleId":"compatibility/structured-output","severity":null,"label":"Structured output","detail":null,"valueNum":null,"valueText":"absent","unit":null,"method":null,"derivation":"read","confidence":null,"sampleSize":null,"synthetic":false,"firstParty":true,"observedAt":"2026-10-07T04:31:12.000Z","payload":null}]},{"category":"sentiment","label":"Popularity","form":"unjudged","verdict":null,"rows":[]},{"category":"characteristics","label":"Characteristics","form":"unjudged","verdict":null,"rows":[]}],"signalCount":31,"publisherSupplied":["name","description","author","version","license"]}