Skills/Claude Code plugins/aws-amplify

aws-amplify@1.0.0

CAUTION

Publisher claims: "Build full-stack apps with AWS Amplify Gen 2 using guided workflows for authentication, data models, storage, GraphQL APIs, and Lambda functions." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry Claude Code plugin marketplacePublisher awslabs · joined 0 days agoInstalls 0Last detonated 53 min ago
Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

HIGH
npx invocation of non-well-known packageskills/amplify-workflow/SKILL.md:138 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packageskills/amplify-workflow/SKILL.md:12 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
Persistence: instructs the agent to auto-load this skill in future sessionsskills/amplify-workflow/SKILL.md:7 · Persistence: instructs the agent to auto-load this skill in future sessions
AST01
HIGH
npx invocation of non-well-known packageskills/amplify-workflow/SKILL.md:139 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packageskills/amplify-workflow/SKILL.md:26 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packageskills/amplify-workflow/SKILL.md:179 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packageskills/amplify-workflow/references/deployment.md:19 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packageskills/amplify-workflow/references/deployment.md:17 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packageskills/amplify-workflow/references/core-web.md:44 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packageskills/amplify-workflow/references/scaffolding.md:88 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packageskills/amplify-workflow/references/scaffolding.md:101 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packageskills/amplify-workflow/references/scaffolding.md:160 · npx invocation of non-well-known package — may execute untrusted code
AST06
MEDIUM
File type combined with upload actionskills/amplify-workflow/references/core-mobile.md:170 · File type combined with upload action — agent may exfiltrate local data files
AST07
HIGH
npx invocation of non-well-known packageskills/amplify-workflow/references/auth-backend.md:226 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packageskills/amplify-workflow/references/data-mobile.md:89 · npx invocation of non-well-known package — may execute untrusted code
AST06
MEDIUM
File type combined with upload actionskills/amplify-workflow/references/storage-backend.md:97 · File type combined with upload action — agent may exfiltrate local data files
AST07
HIGH
npx invocation of non-well-known packageskills/amplify-workflow/references/core-mobile.md:178 · npx invocation of non-well-known package — may execute untrusted code
AST06
LOW
Unpinned dependencyskills/amplify-workflow/references/scaffolding.md:67 · Unpinned dependency
AST06
HIGH
npx invocation of non-well-known packageskills/amplify-workflow/references/functions-and-api.md:66 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packageskills/amplify-workflow/references/scaffolding.md:159 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packageskills/amplify-workflow/references/core-mobile.md:177 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packageskills/amplify-workflow/references/deployment.md:30 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packageskills/amplify-workflow/references/deployment.md:7 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packageskills/amplify-workflow/references/scaffolding.md:97 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
Access to sensitive file pathsskills/amplify-workflow/references/deployment.md:10 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
npx invocation of non-well-known packageskills/amplify-workflow/references/auth-backend.md:125 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packageskills/amplify-workflow/references/deployment.md:16 · npx invocation of non-well-known package — may execute untrusted code
AST06