Skills/Claude Code plugins/aws-serverless

aws-serverless@1.3.0

CAUTION

Publisher claims: "Design, build, deploy, test, and debug serverless applications with AWS Serverless services." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry Claude Code plugin marketplacePublisher awslabs · joined 0 days agoInstalls 0Last detonated 3 h ago
Dispute verdict

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-10-26 and scored it 77/100 (Caution). It is not known to be malicious, but it has behaviour or code a security policy should decide on before install. Notable findings: Rule modification attempt; Rule modification attempt; Rule modification attempt. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

CRITICAL
Rule modification attemptskills/aws-lambda-durable-functions/references/replay-model-rules.md:144 · Rule modification attempt — overwriting existing instructions
AST01
CRITICAL
Rule modification attemptskills/aws-lambda-durable-functions/references/replay-model-rules.md:24 · Rule modification attempt — overwriting existing instructions
AST01
CRITICAL
Rule modification attemptskills/aws-lambda-durable-functions/references/replay-model-rules.md:89 · Rule modification attempt — overwriting existing instructions
AST01
HIGH
npx invocation of non-well-known packageskills/aws-lambda-durable-functions/references/getting-started.md:386 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
Process kill commandskills/aws-lambda/references/powertools.md:58 · Process kill command — agent can terminate processes
AST05
HIGH
Outbound HTTP to raw IP addressskills/aws-lambda-microvms/references/iam-and-security.md:91 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
CRITICAL
Rule modification attemptskills/aws-lambda-durable-functions/references/replay-model-rules.md:191 · Rule modification attempt — overwriting existing instructions
AST01
HIGH
npx invocation of non-well-known packageskills/aws-serverless-deployment/references/cdk-project-setup.md:293 · npx invocation of non-well-known package — may execute untrusted code
AST06
MEDIUM
URL using raw IP addressskills/aws-lambda-microvms/references/iam-and-security.md:91 · URL using raw IP address — may bypass domain-based filtering
AST07
MEDIUM
File type combined with upload actionskills/aws-step-functions/references/validation-and-testing.md:267 · File type combined with upload action — agent may exfiltrate local data files
AST07