aws-well-architected-framework-review

SUSPICIOUS. The skill’s main behavior is coherent with an AWS architecture review and it lacks clear exfiltration, credential harvesting, or malicious installers. However, it has a high-risk agent pattern: broad ingestion of untrusted repository content, parallel subagent expansion, and file-writing capability, which together create notable indirect prompt-injection and repo-integrity risk. Overall this looks like a legitimate but high-exposure analysis skill rather than malware.