aws-helper

Warn

Audited by Socket on Apr 1, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The AWS guidance itself is coherent and low risk, but the out-of-scope fallback instructs a transitive install of an unverified SkillHub target on GitHub. That install step does not belong in a narrowly scoped AWS helper and introduces avoidable trust-chain risk despite no direct credential theft or exfiltration behavior.

Confidence: 90%Severity: 53%
Audit Metadata
Analyzed At
Apr 1, 2026, 03:44 PM
Package URL
pkg:socket/skills-sh/kevinaimonster%2Fskill-hub%2Faws-helper%2F@c11f0447666d67d2a3e39b8e07509f38ea28c3ba