aws-costs
Warn
Audited by Snyk on May 12, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly about AWS cost management and includes specific AWS API/CLI commands that perform monetary actions and budget enforcement. Examples in the prompt show direct financial-execution operations such as purchasing and selling reserved resources and commitments:
- aws savingsplans create-savings-plan (purchase Savings Plans)
- aws savingsplans describe-savings-plans-utilization and create-savings-plan (decision + purchase)
- aws ec2 create-reserved-instances-listing (sell RIs on the Marketplace)
- aws budgets create-budget and aws budgets create-budget-action (create/update budgets and automated budget actions)
These are not generic automation or generic HTTP callers — they are concrete, named AWS operations that create budgets, execute purchase actions, and list/sell reserved instances (i.e., move/commit money). Therefore this skill grants Direct Financial Execution Authority.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata