Skills Explorer Add Skills

rds-db2

An agent skill by aws, from aws/agent-toolkit-for-aws. Tags: database, db2, migration, rds, security.

What it does

Provisions, connects, migrates, and operates Amazon RDS for Db2. Applies when provisioning with IBM customer and site IDs (License Manager, BYOL, GovCloud), connecting over TLS, fixing SQL30082N after Secrets Manager rotation, migration from Db2 LUW (Linux, AIX, Windows, AS400) or z/OS mainframe (ADB2GEN, Q Replication), choosing code page/collation (EBCDIC, CCSID), S3 backup/restore, Multi-AZ and cross-region standby replicas, RDSADMIN procedures, customer-managed KMS BYOK, self-managed Active Directory Kerberos, Db2 audit to S3, minimum IAM, or colocation.

Install

With the skills CLI, which installs into Claude Code, Codex, Cursor and other agents:

npx skills add aws/agent-toolkit-for-aws --skill rds-db2

Or copy the skill folder into Claude Code's skills directory by hand (~/.claude/skills for every project, or .claude/skills inside one):

git clone --depth 1 https://github.com/aws/agent-toolkit-for-aws
cp -r agent-toolkit-for-aws/skills/specialized-skills/database-skills/rds-db2 ~/.claude/skills/rds-db2

Safety box score

Grade F, high risk: 70 of 100 risk points, rated 2026-10-19. The grade rates what the skill and its scripts can reach on the machine of whoever installs it, across eight categories from shell execution to secrets access. How the score works.

This skill is a full operator toolkit for Amazon RDS for Db2: it provisions instances and supporting IAM/KMS/S3/ALB resources, installs/configures Db2 clients, and runs backup, restore, DR, and auth workflows. The main risks are shell-driven installs and helper scripts, broad AWS-side side effects including deletion/promotion actions, and secret-bearing home-directory files; three core helper scripts were not readable.

Category levels, from 0 (none) to 3 (high)
CategoryLevelWhy
Code & shell execution3 (high)The skill ships and recommends shell-based workflows, including `curl -sL https://bit.ly/getdb2driver | bash`, `curl -sL https://bit.ly/precheckdb2migration | bash`, and `scripts/db2-kerberos-test.sh` uses `eval` on user-supplied values.
Network access3 (high)It downloads remote scripts and certificates from `bit.ly` and `truststore.pki.rds.amazonaws.com`, contacts AWS APIs, and even probes IMDS at `169.254.169.254` in `scripts/db2client-airgap.sh`.
Filesystem reach2 (moderate)It writes and rewrites home-directory state such as `~/.db2env`, `~/.db2instances`, `~/.need_password`, `~/.bashrc`, and `~/sqllib/cfg/*`, which is outside the project tree.
Secrets & credentials2 (moderate)The workflow reads/writes secret-bearing files and credentials, including `~/.db2env`, `~/.need_password`, Secrets Manager passwords via `db2_use`, and variables like `SELF_MANAGED_ACTIVE_DIRECTORY_PASSWORD` and `AWS_SECRET_ACCESS_KEY`.
Privilege & persistence2 (moderate)The skill expects root-level installation for the Db2 client, switches to `db2inst1`, modifies shell startup (`~/.bashrc`), and creates AWS roles/service-linked roles such as `aws iam create-service-linked-role`.
Instruction hijack surface0 (none)I did not find instructions to bypass confirmations, hide actions, or follow untrusted remote instructions beyond the normal operator workflow.
Irreversible actions3 (high)It can create, modify, promote, and delete infrastructure: e.g. `aws rds create-db-instance`, `aws rds delete-db-instance`, `aws kms create-key`, `aws iam create-role`, `aws elbv2 create-load-balancer`, and standby-replica promotion.
Transparency3 (high)Three core helper scripts were not readable (`scripts/db2-driver.sh`, `scripts/db2client-configure.sh`, `scripts/functions.sh`), so install/configuration/credential behavior is partially opaque.

Before installing

Rated 2026-10-19 by an automated review of 26 files from the skill's repository.

Source

Repository
aws/agent-toolkit-for-aws (all skills from this repository)
Path
skills/specialized-skills/database-skills/rds-db2/SKILL.md
Branch
main
Updated
2026-09-19