AWS Penetration Testing

Fail

Audited by Socket on Oct 23, 2026

2 alerts found:

SecurityMalware
SecurityMEDIUM
SKILL.md

SUSPICIOUS/HIGH-RISK skill. Its capabilities are internally aligned with its stated purpose, but that purpose is to give an AI agent offensive AWS exploitation, credential theft, persistence, and track-covering workflows. Install sources are mostly legitimate but unpinned; the main concern is the dangerous operational scope, not confirmed malware.

Confidence: 92%Severity: 90%
MalwareHIGH
references/advanced-aws-pentesting.md

This artifact is a high-misuse training/playbook that includes explicit malicious Lambda privilege-escalation code (AdministratorAccess via IAM policy attachment) and actionable backdooring/persistence instructions (Lambda code update and invocation), along with abuse-ready workflows for secrets/KMS, enumeration, and container tampering. While it is not demonstrated as executable package malware in the provided fragment, its content is strongly indicative of intentional offensive capability and should be treated as a serious security/supply-chain red flag if included in a dependency or distributed software package.

Confidence: 70%Severity: 90%
Audit Metadata
Analyzed At
Oct 23, 2026, 01:25 AM
Package URL
pkg:socket/skills-sh/davila7%2Fclaude-code-templates%2Faws-penetration-testing%2F@ed375563146f59f176484f2b59fcad290861a9ca375b121ac68a510901227e13