aws-setup

SUSPICIOUS. The skill's AWS/OpenSearch capabilities broadly match its stated deployment purpose, and most scanner findings are documentation artifacts. The main concern is install/execution trust: it asks the agent to run external MCP tooling via uvx, some pinned to @latest, and at least one critical tool (opensearch-mcp-server) is not verified by the provided evidence. This is not clearly malicious, but the combination of third-party tool execution plus AWS credential/API access makes the risk medium.