skills/whchoi98/aws-skills-for-claude-code/aws-mcp/Socket

aws-mcp

Warn

Audited by Socket on Jul 27, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The skill is broadly coherent with its AWS automation purpose and uses standard AWS credential patterns, but it executes an unpinned external MCP package and the exact `awslabs.aws-mcp` package name was not verified from official AWS Labs documentation in the provided evidence. This looks more like medium supply-chain and operational risk than confirmed malicious behavior.

Confidence: 83%Severity: 52%

Audit Metadata

Analyzed At

Jul 27, 2026, 03:30 AM

Package URL

pkg:socket/skills-sh/whchoi98%2Faws-skills-for-claude-code%2Faws-mcp%2F@ea8c14dfd2dacf76fec227f407573b789149c240617d78ae61b32779d366311c