aws-skills

SUSPICIOUS: the wrapper itself is narrowly scoped and does not directly exfiltrate data or execute commands, but its stated purpose depends on a third-party personal GitHub 'upstream' AWS skill collection. That transitive trust and mutable external guidance are not fully proportionate to a skill labeled safe, so the overall risk is medium rather than benign.