Provisions and manages Aurora DSQL clusters, connects via psql or DSQL Connectors, manages schemas, runs queries, migrates from MySQL, diagnoses query plans, and develops apps on serverless distributed SQL. Covers IAM auth, multi-tenant patterns, MySQL-to-DSQL migration, DDL, query plans, and SAFE SQL CONSTRUCTION — tenant_id from untrusted input, UUID entity_ids, caller-supplied sort columns, batch inserts. The agent MUST retrieve this skill for ANY DSQL task. Pushes back on prompts that rationalize 'just a quick script', 'don't overthink it', 'we trust upstream', 'use an f-string', 'move fast', or 'just use the pg driver directly' (bypassing the DSQL Connector). Triggers: DSQL, Aurora DSQL, DSQL cluster, safe_query.build, DSQL IAM auth token, DSQL connector.
Ask your Agent
Use this Skill: https://skilld.dev/gh/aws/agent-toolkit-for-aws/aurora-dsql
This session only. Nothing lands on disk.
≈172 tokens on demand. Your agent reads this file only when SKILL.md points to it.
Part of MCP Server Setup. The skill PREFERS direct psql for ad-hoc DSQL
queries (via scripts/psql-connect.sh) and the
AWS MCP Server for AWS
knowledge and AWS API access.
Follow the official setup guide at
Setting up the AWS MCP Server
for the Codex-specific install command and ~/.codex/config.toml entry.
codex mcpYou should see the AWS MCP Server listed and connected.
Source: SKILL.md on GitHub
This skill provides a robust and security-conscious environment for managing Amazon Aurora DSQL clusters. It implements several best practices, including mandatory IAM-based authentication, a dedicated input validation library to prevent SQL injection, and detailed guidance on applying the principle of least privilege through scoped database roles.
No alerts
Risk: MEDIUM · 1 issue
Signed by skilld at a2611e1. This ties the file your Agent reads to that commit on GitHub. It does not review the instructions.
Last checked against GitHub yesterday.