amazon-bedrock

Warn

Audited by Socket on Oct 23, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill is largely coherent and AWS-official, with no clear credential theft or malicious exfiltration, but it includes high-impact autonomous payment capability and some expanded trust surfaces (Harness skill sources, external docs/samples). Treat as a legitimate but high-consequence cloud-admin skill that needs careful human approval for payment and deployment actions.

Confidence: 90%Severity: 68%
Audit Metadata
Analyzed At
Oct 23, 2026, 09:41 PM
Package URL
pkg:socket/skills-sh/aws%2Fagent-toolkit-for-aws%2Famazon-bedrock%2F@03b5bccd1e6d6e9593f8b2c940bc926d71f090580ffd6630cc65713dc3e8c1bd