aws-core@1.1.0

CAUTION

Publisher claims: "Build, deploy, and operate applications on AWS. Skills to author infrastructure-as-code, use core services, and complete common tasks." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry Claude Code plugin marketplacePublisher aws · joined 0 days agoInstalls 0Last detonated 53 min ago

Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.0sprocessscript backend runs setup only

Static findings

HIGH

Access to sensitive file pathsskills/aws-blocks/SKILL.md:80 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

npx invocation of non-well-known packageskills/aws-blocks/SKILL.md:24 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageskills/aws-blocks/SKILL.md:47 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageskills/aws-auth/SKILL.md:125 · npx invocation of non-well-known package — may execute untrusted code

AST06

CRITICAL

Fake instruction boundary tagskills/amazon-bedrock/SKILL.md:207 · Fake instruction boundary tag

AST01

HIGH

npx invocation of non-well-known packageskills/aws-blocks/SKILL.md:31 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageskills/aws-blocks/SKILL.md:39 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageskills/aws-cdk/SKILL.md:64 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Coercive compliance languageskills/aws-cloudformation/SKILL.md:166 · Coercive compliance language

AST01

CRITICAL

Credential pass-through configurationskills/aws-sdk-swift-usage/SKILL.md:112 · Credential pass-through configuration — agent relays sensitive credentials

AST02

CRITICAL

Privileged sudo commandskills/aws-deployment/references/codedeploy.md:241 · Privileged sudo command — agent may execute with elevated privileges

AST05

HIGH

npx invocation of non-well-known packageskills/aws-auth/SKILL.md:13 · npx invocation of non-well-known package — may execute untrusted code

AST06

CRITICAL

Credential pass-through configurationskills/launch-with-aws/scripts/auth.py:391 · Credential pass-through configuration — agent relays sensitive credentials

AST02

HIGH

npx invocation of non-well-known packageskills/aws-auth/SKILL.md:27 · npx invocation of non-well-known package — may execute untrusted code

AST06

CRITICAL

Prompt injectionskills/amazon-bedrock/references/guardrails.md:201 · Prompt injection — explicit attempt to bypass safety measures

AST01

CRITICAL

Prompt injectionskills/amazon-bedrock/references/guardrails.md:221 · Prompt injection — explicit attempt to bypass safety measures

AST01

CRITICAL

Credential pass-through configurationskills/aws-serverless/SKILL.md:39 · Credential pass-through configuration — agent relays sensitive credentials

AST02

HIGH

Python subprocess execution detectedskills/launch-with-aws/scripts/archive.py:116 · Python subprocess execution detected

AST05

HIGH

Python subprocess execution detectedskills/launch-with-aws/scripts/auth.py:404 · Python subprocess execution detected

AST05

HIGH

Access to sensitive file pathsskills/launch-with-aws/scripts/archive.py:78 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

MEDIUM

URL using raw IP addressskills/aws-compute/references/provisioning.md:44 · URL using raw IP address — may bypass domain-based filtering

AST07

HIGH

Access to sensitive file pathsskills/launch-with-aws/scripts/archive.py:79 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Outbound HTTP to raw IP addressskills/launch-with-aws/scripts/auth.py:448 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

MEDIUM

File type combined with upload actionskills/aws-database/SKILL.md:34 · File type combined with upload action — agent may exfiltrate local data files

AST07

HIGH

Process kill commandskills/aws-serverless/references/production.md:55 · Process kill command — agent can terminate processes

AST05

HIGH

Access to sensitive file pathsskills/launch-with-aws/scripts/archive.py:81 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

MEDIUM

URL using raw IP addressskills/launch-with-aws/scripts/auth.py:138 · URL using raw IP address — may bypass domain-based filtering

AST07

HIGH

Coercive compliance languageskills/aws-secrets-manager/SKILL.md:30 · Coercive compliance language

AST01

HIGH

Access to sensitive file pathsskills/launch-with-aws/scripts/archive.py:80 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsskills/launch-with-aws/scripts/archive.py:82 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

File permission modification commandskills/aws-compute/references/provisioning.md:48 · File permission modification command — agent changes file ownership/permissions

AST05

HIGH

Coercive compliance languageskills/aws-cloudformation/SKILL.md:174 · Coercive compliance language

AST01

MEDIUM

File type combined with upload actionskills/aws-sdk-js-v3-usage/SKILL.md:185 · File type combined with upload action — agent may exfiltrate local data files

AST07

HIGH

Outbound HTTP to raw IP addressskills/launch-with-aws/scripts/auth.py:138 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

npx invocation of non-well-known packageskills/launch-with-aws/SKILL.md:259 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

File permission modification commandskills/aws-compute/references/provisioning.md:76 · File permission modification command — agent changes file ownership/permissions

AST05

HIGH

Access to sensitive file pathsskills/signing-in-to-aws/SKILL.md:74 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Coercive compliance languageskills/aws-storage/SKILL.md:35 · Coercive compliance language

AST01

HIGH

Outbound HTTP to raw IP addressskills/aws-compute/references/provisioning.md:44 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

Coercive compliance languageskills/aws-cloudformation/SKILL.md:191 · Coercive compliance language

AST01

HIGH

Access to sensitive file pathsskills/signing-in-to-aws/SKILL.md:75 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Coercive compliance languageskills/aws-cloudformation/SKILL.md:200 · Coercive compliance language

AST01

MEDIUM

URL using raw IP addressskills/launch-with-aws/scripts/auth.py:448 · URL using raw IP address — may bypass domain-based filtering

AST07

HIGH

npx invocation of non-well-known packageskills/launch-with-aws/SKILL.md:260 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Coercive compliance languageskills/aws-cloudformation/SKILL.md:183 · Coercive compliance language

AST01