skills/whchoi98/kiro-cli-power/aws-amplify/Socket

aws-amplify

Warn

Audited by Socket on May 5, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The stated purpose and AWS credential scope fit an Amplify skill, and no clear exfiltration behavior is shown. However, the MCP install reference is doc-inconsistent: it uses an unpinned `uvx` package name that could not be verified against AWS's documented MCP packages, creating meaningful supply-chain risk even if the broader workflow is legitimate.

Confidence: 80%Severity: 62%

Audit Metadata

Analyzed At

May 5, 2026, 07:13 AM

Package URL

pkg:socket/skills-sh/whchoi98%2Fkiro-cli-power%2Faws-amplify%2F@6852ed8209c1671913ebe408fc314e51fee80351