awsclaw-cloudwatch

Warn

Audited by Socket on Apr 13, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill’s CloudWatch-focused capabilities mostly align with its stated purpose and its data flows appear aimed at official AWS services, but it relies on a third-party awsclaw tool with limited provenance and no verification details in the skill. The main risk is trusting a non-AWS extension with local AWS credentials and high-impact CloudWatch management actions.

Confidence: 77%Severity: 72%
Audit Metadata
Analyzed At
Apr 13, 2026, 08:15 PM
Package URL
pkg:socket/skills-sh/necatiarslan%2Fawsclaw%2Fawsclaw-cloudwatch%2F@b19ae032f5c34f4b9a44141f96c7e45c7dd50d86
Security Audit — socket — awsclaw-cloudwatch