aws-iot-greengrass

Warn

Audited by Socket on Oct 6, 2026

2 alerts found:

Anomalyx2
AnomalyLOW
references/setup/setup-greengrass-lite-container.md

The fragment is setup guidance rather than malware. It requests broad AWS IoT permissions, a privileged container, and local handling of device private keys, creating meaningful security risks if followed without safeguards. Apply least privilege, avoid privileged mode where possible, secure key files, and pin and verify dependencies.

Confidence: 98%Severity: 67%
AnomalyLOW
references/setup/setup-greengrass-container.md

No malware is evident in this documentation. Following its instructions would create a high-privilege container with access to usable AWS credentials, and the unpinned download lacks an explicit integrity check. These are meaningful operational security risks, not evidence of malicious behavior in the provided fragment.

Confidence: 98%Severity: 68%
Audit Metadata
Analyzed At
Oct 6, 2026, 12:56 PM
Package URL
pkg:socket/skills-sh/aws-greengrass%2Fgreengrass-agent-context-pack%2Faws-iot-greengrass%2F@e3c6defbc198993cd5a25be12ccc7b87b2afaa28cd1947554de6988361c4b6d4