AWS Penetration Testing
Audited by Socket on Oct 23, 2026
2 alerts found:
SecurityMalwareSUSPICIOUS/HIGH-RISK skill. Its capabilities are internally aligned with its stated purpose, but that purpose is to give an AI agent offensive AWS exploitation, credential theft, persistence, and track-covering workflows. Install sources are mostly legitimate but unpinned; the main concern is the dangerous operational scope, not confirmed malware.
This artifact is a high-misuse training/playbook that includes explicit malicious Lambda privilege-escalation code (AdministratorAccess via IAM policy attachment) and actionable backdooring/persistence instructions (Lambda code update and invocation), along with abuse-ready workflows for secrets/KMS, enumeration, and container tampering. While it is not demonstrated as executable package malware in the provided fragment, its content is strongly indicative of intentional offensive capability and should be treated as a serious security/supply-chain red flag if included in a dependency or distributed software package.