create-install-scripts

Warn

Audited by Socket on Sep 28, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/setup-cicd.sh

No direct malicious behavior is evident in this fragment. It is an infrastructure setup script with a significant least-privilege concern: build code supplied via the S3 source can run in a privileged CodeBuild environment with AdministratorAccess. Restrict the role to required actions and harden the bucket before use.

Confidence: 98%Severity: 68%
Audit Metadata
Analyzed At
Sep 28, 2026, 08:17 AM
Package URL
pkg:socket/skills-sh/aws-samples%2Fsample-agent-skills-for-builders%2Fcreate-install-scripts%2F@6608f46d08863b41119d4d19bb380533ca2a766b0169e4ac7d79b2a79f1e4d5b