amazon-bedrock

SUSPICIOUS. The skill is largely coherent, first-party AWS-focused, and its data flows go to official AWS/service endpoints rather than hidden intermediaries. However, it includes high-risk autonomous payment capability and some medium supply-chain trust concerns (preview CLI, mutable GitHub fetch), so it is not benign despite lacking signs of credential theft or malware.