agents-build

Warn

Audited by Socket on Sep 26, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is largely coherent with its AWS AgentCore build purpose and uses mostly official AWS endpoints and tools, but it materially expands the agent's power with live shell-command execution and autonomous payments. Those capabilities belong to parts of the stated purpose, yet they create high operational risk and require strict user approval, IAM scoping, and secret-handling discipline. This looks like a legitimate but high-risk workflow skill, not confirmed malware.

Confidence: 87%Severity: 76%
Audit Metadata
Analyzed At
Sep 26, 2026, 03:59 PM
Package URL
pkg:socket/skills-sh/aws%2Fagent-toolkit-for-aws%2Fagents-build%2F@9eb4194ef4d8036ce8ebfb330b364c46a4abdb6912dde83642b70f457ce778e4