aws-transform@1.9.0
CAUTIONPublisher claims: "Migrate, modernize, and upgrade codebases to AWS. Transforms .NET Framework to .NET 8/10, mainframe COBOL to Java, VMware VMs to EC2, SQL Server to Aurora, and upgrades Java/Python/Node.js versions and AWS SDKs. AWS Transform - continuous modernization analyzes codebases for tech debt, security issues, and upgrade opportunities, then remediates them." Observed in sandbox: no network, touches nothing outside the project, writes no memory.
Registry Claude Code plugin marketplacePublisher awslabs · joined 0 days agoInstalls 0Last detonated 3 h ago
Is [email protected] safe to install?
KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-10-26 and scored it 68/100 (Caution). It is not known to be malicious, but it has behaviour or code a security policy should decide on before install. Notable findings: Reads credential paths from the home directory; Pipe-to-shell pattern; Privileged sudo command. Summary: no network, touches nothing outside the project, writes no memory.
Behavior trace
Honeypot run · 0 s · 1 scenarios · 0 deviationst+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
Static findings
CRITICAL
Reads credential paths from the home directoryskills/aws-transform/references/custom-multi-transformation.md:214 · Reads credential paths from the home directory
AST03CRITICAL
Pipe-to-shell patternskills/aws-transform/references/custom.md:168 · Pipe-to-shell pattern — downloads and immediately executes remote code
AST06CRITICAL
Privileged sudo commandskills/aws-transform/references/custom-multi-transformation.md:59 · Privileged sudo command — agent may execute with elevated privileges
AST05CRITICAL
Pipe-to-shell patternskills/aws-transform/references/continuous-modernization-security-agent.md:44 · Pipe-to-shell pattern — downloads and immediately executes remote code
AST06CRITICAL
Privileged sudo commandskills/aws-transform/references/custom.md:122 · Privileged sudo command — agent may execute with elevated privileges
AST05HIGH
Access to sensitive file pathsskills/aws-transform/references/auth.md:41 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05HIGH
Access to sensitive file pathsskills/aws-transform/SKILL.md:164 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05CRITICAL
Reads credential paths from the home directoryskills/aws-transform/references/custom-remote-execution.md:296 · Reads credential paths from the home directory
AST03CRITICAL
Fake instruction boundary tagskills/aws-transform/references/continuous-modernization-remediation.md:14 · Fake instruction boundary tag
AST01CRITICAL
Pipe-to-shell patternskills/aws-transform/references/custom-remote-execution.md:457 · Pipe-to-shell pattern — downloads and immediately executes remote code
AST06CRITICAL
Reads credential paths from the home directoryskills/aws-transform/references/auth.md:43 · Reads credential paths from the home directory
AST03CRITICAL
Privileged sudo commandskills/aws-transform/references/custom.md:672 · Privileged sudo command — agent may execute with elevated privileges
AST05HIGH
Refusal suppressionskills/aws-transform/SKILL.md:374 · Refusal suppression — attempting to prevent safety responses
AST01CRITICAL
Pipe-to-shell patternREADME.md:34 · Pipe-to-shell pattern — downloads and immediately executes remote code
AST06CRITICAL
Prompting user to enter sensitive credentialsskills/aws-transform/references/custom-troubleshooting.md:50 · Prompting user to enter sensitive credentials — social engineering
AST03CRITICAL
Pipe-to-shell patternskills/aws-transform/SKILL.md:138 · Pipe-to-shell pattern — downloads and immediately executes remote code
AST06CRITICAL
Reads credential paths from the home directoryskills/aws-transform/references/custom-single-transformation.md:89 · Reads credential paths from the home directory
AST03CRITICAL
Pipe-to-shell patternskills/aws-transform/SKILL.md:62 · Pipe-to-shell pattern — downloads and immediately executes remote code
AST06CRITICAL
Privileged sudo commandskills/aws-transform/references/custom-single-transformation.md:36 · Privileged sudo command — agent may execute with elevated privileges
AST05CRITICAL
Destructive file system command detectedskills/aws-transform/references/custom.md:567 · Destructive file system command detected
AST05CRITICAL
Reads credential paths from the home directoryskills/aws-transform/references/custom-single-transformation.md:129 · Reads credential paths from the home directory
AST03CRITICAL
Pipe-to-shell patternREADME.md:32 · Pipe-to-shell pattern — downloads and immediately executes remote code
AST06CRITICAL
Reads credential paths from the home directoryskills/aws-transform/references/custom-multi-transformation.md:114 · Reads credential paths from the home directory
AST03CRITICAL
Fake instruction boundary tagskills/aws-transform/references/mainframe-reimagine-specgen.md:355 · Fake instruction boundary tag
AST01CRITICAL
Reads credential paths from the home directoryskills/aws-transform/SKILL.md:164 · Reads credential paths from the home directory
AST03CRITICAL
Reads credential paths from the home directoryskills/aws-transform/references/custom-single-transformation.md:99 · Reads credential paths from the home directory
AST03CRITICAL
Pipe-to-shell patternskills/aws-transform/references/continuous-modernization-setup.md:25 · Pipe-to-shell pattern — downloads and immediately executes remote code
AST06CRITICAL
Pipe-to-shell patternskills/aws-transform/references/custom.md:602 · Pipe-to-shell pattern — downloads and immediately executes remote code
AST06CRITICAL
Reads credential paths from the home directoryskills/aws-transform/references/custom-single-transformation.md:326 · Reads credential paths from the home directory
AST03CRITICAL
Privileged sudo commandskills/aws-transform/references/custom.md:121 · Privileged sudo command — agent may execute with elevated privileges
AST05CRITICAL
Prompting user to enter sensitive credentialsskills/aws-transform/references/custom-troubleshooting.md:42 · Prompting user to enter sensitive credentials — social engineering
AST03CRITICAL
Pipe-to-shell patternskills/aws-transform/SKILL.md:72 · Pipe-to-shell pattern — downloads and immediately executes remote code
AST06CRITICAL
Reads credential paths from the home directoryskills/aws-transform/references/custom-multi-transformation.md:86 · Reads credential paths from the home directory
AST03CRITICAL
Reads credential paths from the home directoryskills/aws-transform/references/custom-single-transformation.md:176 · Reads credential paths from the home directory
AST03CRITICAL
Fake instruction boundary tagskills/aws-transform/references/continuous-modernization-remediation.md:161 · Fake instruction boundary tag
AST01CRITICAL
Reads credential paths from the home directoryskills/aws-transform/references/workflow.md:327 · Reads credential paths from the home directory
AST03HIGH
Access to sensitive file pathsskills/aws-transform/references/custom-results-synthesis.md:10 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05HIGH
Access to sensitive file pathsskills/aws-transform/references/custom-results-synthesis.md:7 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05HIGH
References a credential file in the home directoryskills/aws-transform/references/custom.md:140 · References a credential file in the home directory
AST03HIGH
Process kill commandskills/aws-transform/references/custom-multi-transformation.md:114 · Process kill command — agent can terminate processes
AST05HIGH
Access to sensitive file pathsskills/aws-transform/references/continuous-modernization-analysis.md:262 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05HIGH
Process kill commandskills/aws-transform/references/custom-single-transformation.md:175 · Process kill command — agent can terminate processes
AST05HIGH
Access to sensitive file pathsskills/aws-transform/references/custom-multi-transformation.md:35 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05HIGH
Process kill commandskills/aws-transform/references/custom-single-transformation.md:162 · Process kill command — agent can terminate processes
AST05HIGH
Access to sensitive file pathsskills/aws-transform/references/continuous-modernization-source.md:172 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05HIGH
File permission modification commandskills/aws-transform/references/custom-multi-transformation.md:93 · File permission modification command — agent changes file ownership/permissions
AST05MEDIUM
Remote installer piped to shellREADME.md:34 · Remote installer piped to shell
AST07HIGH
Access to sensitive file pathsskills/aws-transform/references/custom-single-transformation.md:53 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05HIGH
Access to sensitive file pathsskills/aws-transform/references/custom-single-transformation.md:88 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05HIGH
Access to sensitive file pathsskills/aws-transform/references/continuous-modernization-aws-managed-execution.md:105 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05HIGH
File permission modification commandskills/aws-transform/references/custom-single-transformation.md:96 · File permission modification command — agent changes file ownership/permissions
AST05HIGH
Access to sensitive file pathsskills/aws-transform/references/custom-multi-transformation.md:33 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05HIGH
Process kill commandskills/aws-transform/references/custom-troubleshooting.md:18 · Process kill command — agent can terminate processes
AST05MEDIUM
Remote installer piped to shellREADME.md:32 · Remote installer piped to shell
AST07HIGH
Process kill commandskills/aws-transform/references/custom-single-transformation.md:129 · Process kill command — agent can terminate processes
AST05HIGH
Access to sensitive file pathsskills/aws-transform/references/custom.md:137 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05HIGH
Access to sensitive file pathsskills/aws-transform/references/continuous-modernization-remediation.md:189 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05HIGH
Access to sensitive file pathsskills/aws-transform/references/custom.md:296 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05HIGH
Process kill commandskills/aws-transform/references/custom-multi-transformation.md:124 · Process kill command — agent can terminate processes
AST05HIGH
Access to sensitive file pathsskills/aws-transform/references/workflow.md:327 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05HIGH
Access to sensitive file pathsskills/aws-transform/references/custom-multi-transformation.md:26 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05HIGH
Access to sensitive file pathsskills/aws-transform/references/auth.md:43 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05HIGH
Access to sensitive file pathsskills/aws-transform/references/custom-single-transformation.md:46 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05HIGH
Access to sensitive file pathsskills/aws-transform/references/custom-troubleshooting.md:72 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05MEDIUM
MCP server using network transport (SSE/HTTP)README.md:19 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04HIGH
References a credential file in the home directoryskills/aws-transform/references/custom.md:159 · References a credential file in the home directory
AST03HIGH
Access to sensitive file pathsskills/aws-transform/references/custom-remote-execution.md:296 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05MEDIUM
Remote installer piped to shellskills/aws-transform/SKILL.md:62 · Remote installer piped to shell
AST07HIGH
Access to sensitive file pathsskills/aws-transform/references/custom.md:159 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05HIGH
Coercive compliance languageskills/aws-transform/references/custom.md:787 · Coercive compliance language
AST01HIGH
Access to sensitive file pathsskills/aws-transform/references/custom.md:140 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05HIGH
Access to sensitive file pathsskills/aws-transform/references/custom-single-transformation.md:54 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05HIGH
Access to sensitive file pathsskills/aws-transform/references/custom-multi-transformation.md:85 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05HIGH
Access to sensitive file pathsskills/aws-transform/references/custom-multi-transformation.md:34 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05HIGH
Access to sensitive file pathsskills/aws-transform/references/continuous-modernization-source.md:174 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05HIGH
Access to sensitive file pathsskills/aws-transform/references/continuous-modernization-setup.md:79 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05HIGH
Access to sensitive file pathsskills/aws-transform/references/custom-results-synthesis.md:50 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05HIGH
References a credential file in the home directoryskills/aws-transform/references/custom.md:137 · References a credential file in the home directory
AST03HIGH
Access to sensitive file pathsskills/aws-transform/references/custom.md:297 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05HIGH
Access to sensitive file pathsskills/aws-transform/references/custom-troubleshooting.md:73 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05MEDIUM
File type combined with upload actionskills/aws-transform/references/continuous-modernization-security-agent.md:142 · File type combined with upload action — agent may exfiltrate local data files
AST07MEDIUM
Remote installer piped to shellskills/aws-transform/references/custom-remote-execution.md:457 · Remote installer piped to shell
AST07MEDIUM
Remote installer piped to shellskills/aws-transform/references/custom.md:602 · Remote installer piped to shell
AST07MEDIUM
Remote installer piped to shellskills/aws-transform/references/continuous-modernization-setup.md:25 · Remote installer piped to shell
AST07MEDIUM
File type combined with upload actionskills/aws-transform/references/sql.md:172 · File type combined with upload action — agent may exfiltrate local data files
AST07MEDIUM
Remote installer piped to shellskills/aws-transform/references/custom.md:168 · Remote installer piped to shell
AST07MEDIUM
Remote installer piped to shellskills/aws-transform/SKILL.md:138 · Remote installer piped to shell
AST07MEDIUM
Remote installer piped to shellskills/aws-transform/references/continuous-modernization-security-agent.md:44 · Remote installer piped to shell
AST07MEDIUM
File type combined with upload actionskills/aws-transform/references/custom-cli-reference.md:103 · File type combined with upload action — agent may exfiltrate local data files
AST07MEDIUM
File type combined with upload actionskills/aws-transform/references/sql.md:603 · File type combined with upload action — agent may exfiltrate local data files
AST07MEDIUM
File type combined with upload actionskills/aws-transform/references/sql.md:106 · File type combined with upload action — agent may exfiltrate local data files
AST07MEDIUM
Remote installer piped to shellskills/aws-transform/SKILL.md:72 · Remote installer piped to shell
AST07