aws-security-review

SUSPICIOUS. The skill’s capabilities mostly match its stated AWS security-audit purpose, and there is no explicit credential theft or exfiltration path in the text. However, it equips an AI agent with cloud security assessment and privilege-escalation discovery behavior, which is high-risk agent capability, and it references external tooling without scoped execution or trust controls. Risk is elevated more by offensive security enablement than by confirmed malicious behavior.