aws-agents@1.0.0

CAUTION

Publisher claims: "Build, deploy, and operate AI agents on AWS. Skills for scaffolding agents with Amazon Bedrock AgentCore, connecting tools, memory, policies, evaluation, debugging, and production hardening." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry Claude Code plugin marketplacePublisher aws · joined 0 days agoInstalls 0Last detonated 53 min ago

Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.0sprocessscript backend runs setup only

Static findings

HIGH

Access to sensitive file pathsskills/agents-build/references/multi-agent.md:225 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsskills/agents-connect/SKILL.md:507 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Destructive file system command detectedskills/agents-optimize/references/evals.md:358 · Destructive file system command detected

AST05

HIGH

Access to sensitive file pathsskills/agents-build/references/multi-agent.md:215 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsskills/agents-build/references/browser.md:234 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsskills/agents-build/references/multi-agent.md:216 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsskills/agents-build/references/payments.md:170 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsskills/agents-build/references/multi-agent.md:386 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsskills/agents-build/references/payments.md:152 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

npx invocation of non-well-known packageskills/agents-build/references/teardown.md:76 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Instructs the agent to modify its persistent memory or instruction filesskills/agents-build/SKILL.md:93 · Instructs the agent to modify its persistent memory or instruction files

AST01

CRITICAL

Pipe-to-shell patternskills/agents-debug/references/doctor.md:83 · Pipe-to-shell pattern — downloads and immediately executes remote code

AST06

HIGH

Access to sensitive file pathsskills/agents-build/references/multi-agent.md:230 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsskills/agents-connect/SKILL.md:468 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Privileged sudo commandskills/agents-debug/references/doctor.md:173 · Privileged sudo command — agent may execute with elevated privileges

AST05

HIGH

Access to sensitive file pathsskills/agents-build/references/payments.md:199 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsskills/agents-build/references/payments.md:112 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsskills/agents-connect/SKILL.md:424 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsskills/agents-build/references/local-vs-deployed.md:12 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Python subprocess execution detectedskills/agents-pay/packages/openclaw/test/test_agentcore_bridge.py:173 · Python subprocess execution detected

AST05

HIGH

npx invocation of non-well-known packageskills/agents-pay/packages/openclaw/PUBLISHING.md:70 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageskills/agents-pay/packages/openclaw/PUBLISHING.md:36 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Access to sensitive file pathsskills/agents-pay/packages/openclaw/skills/agents-pay/SKILL.md:251 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsskills/agents-pay/SKILL.md:251 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

File permission modification commandskills/agents-pay/references/troubleshooting.md:109 · File permission modification command — agent changes file ownership/permissions

AST05

HIGH

Access to sensitive file pathsskills/agents-pay/packages/openclaw/skills/agents-pay/SKILL.md:250 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

MEDIUM

Remote installer piped to shellskills/agents-debug/references/doctor.md:83 · Remote installer piped to shell

AST07

HIGH

Python subprocess execution detectedskills/agents-pay/scripts/test_portability.py:148 · Python subprocess execution detected

AST05

HIGH

File permission modification commandskills/agents-pay/scripts/agents_pay_admin.py:399 · File permission modification command — agent changes file ownership/permissions

AST05

HIGH

Process kill commandskills/agents-connect/references/policy.md:10 · Process kill command — agent can terminate processes

AST05

HIGH

npx invocation of non-well-known packageskills/agents-pay/packages/openclaw/PUBLISHING.md:61 · npx invocation of non-well-known package — may execute untrusted code

AST06

MEDIUM

File type combined with upload actionskills/agents-debug/SKILL.md:687 · File type combined with upload action — agent may exfiltrate local data files

AST07

HIGH

Python subprocess execution detectedskills/agents-pay/scripts/test_portability.py:141 · Python subprocess execution detected

AST05

HIGH

File permission modification commandskills/agents-pay/scripts/x402_policy.py:172 · File permission modification command — agent changes file ownership/permissions

AST05

HIGH

Python subprocess execution detectedskills/agents-pay/scripts/test_portability.py:131 · Python subprocess execution detected

AST05

HIGH

Outbound HTTP to raw IP addressskills/agents-pay/scripts/test_x402_policy.py:1113 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

Access to sensitive file pathsskills/agents-pay/references/setup.md:87 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

npx invocation of non-well-known packageskills/agents-pay/scripts/test_portability.py:10 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

URL with embedded credentialsskills/agents-pay/scripts/test_x402_policy.py:535 · URL with embedded credentials — may be phishing or credential leaking

AST07

HIGH

File permission modification commandskills/agents-pay/scripts/agents_pay_admin.py:397 · File permission modification command — agent changes file ownership/permissions

AST05

HIGH

npx invocation of non-well-known packageskills/agents-pay/packages/openclaw/PUBLISHING.md:53 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Access to sensitive file pathsskills/agents-get-started/SKILL.md:225 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

URL with embedded credentialsskills/agents-pay/scripts/test_x402_policy.py:555 · URL with embedded credentials — may be phishing or credential leaking

AST07

HIGH

Access to sensitive file pathsskills/agents-pay/SKILL.md:250 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

npx invocation of non-well-known packageskills/agents-deploy/SKILL.md:176 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Python subprocess execution detectedskills/agents-pay/scripts/test_x402_policy.py:1088 · Python subprocess execution detected

AST05

HIGH

Access to sensitive file pathsskills/agents-pay/scripts/test_x402_policy.py:549 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

MEDIUM

URL using raw IP addressskills/agents-pay/scripts/test_x402_policy.py:1113 · URL using raw IP address — may bypass domain-based filtering

AST07

HIGH

Access to sensitive file pathsskills/agents-pay/references/setup.md:88 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

MEDIUM

File type combined with upload actionskills/agents-connect/SKILL.md:424 · File type combined with upload action — agent may exfiltrate local data files

AST07

HIGH

npx invocation of non-well-known packageskills/agents-pay/scripts/test_portability.py:116 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

File permission modification commandskills/agents-pay/scripts/x402_policy.py:188 · File permission modification command — agent changes file ownership/permissions

AST05

HIGH

Access to sensitive file pathsskills/agents-harden/SKILL.md:341 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsskills/agents-pay/references/setup.md:83 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

File permission modification commandskills/agents-pay/references/setup.md:88 · File permission modification command — agent changes file ownership/permissions

AST05

MEDIUM

URL using raw IP addressskills/agents-pay/scripts/test_x402_policy.py:1102 · URL using raw IP address — may bypass domain-based filtering

AST07

HIGH

npx invocation of non-well-known packageskills/agents-pay/packages/openclaw/PUBLISHING.md:39 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Outbound HTTP to raw IP addressskills/agents-pay/scripts/test_x402_policy.py:1102 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

Access to sensitive file pathsskills/agents-get-started/SKILL.md:238 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05