agents-build
Warn
Audited by Socket on Sep 26, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the skill is largely coherent with its AWS AgentCore build purpose and uses mostly official AWS endpoints and tools, but it materially expands the agent's power with live shell-command execution and autonomous payments. Those capabilities belong to parts of the stated purpose, yet they create high operational risk and require strict user approval, IAM scoping, and secret-handling discipline. This looks like a legitimate but high-risk workflow skill, not confirmed malware.
Confidence: 87%Severity: 76%
Audit Metadata