Skills/Claude Code plugins/aws-agents-for-devsecops

aws-agents-for-devsecops@1.1.0

VERIFIED

Publisher claims: "Investigate incidents, review code and execute UAT for release readiness, scan code for vulnerabilities, and run penetration tests with AWS DevOps Agent and AWS Security Agent." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry Claude Code plugin marketplacePublisher aws · joined 0 days agoInstalls 0Last detonated 53 min ago
$/plugin install aws-agents-for-devsecops@claude-plugins-official
Report an issue

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

HIGH
Instructs the agent to modify its persistent memory or instruction filesskills/coordinating-multi-space-devops-agent/SKILL.md:54 · Instructs the agent to modify its persistent memory or instruction files
AST01
CRITICAL
Pipe-to-shell patternskills/setup-devops-agent/SKILL.md:261 · Pipe-to-shell pattern — downloads and immediately executes remote code
AST06
MEDIUM
Remote installer piped to shellskills/setup-devops-agent/SKILL.md:261 · Remote installer piped to shell
AST07
HIGH
Coercive compliance languageskills/analyzing-release-readiness/SKILL.md:96 · Coercive compliance language
AST01
CRITICAL
Fake instruction boundary tagcommands/chat.md:9 · Fake instruction boundary tag
AST01