Scanned skills

aws/agent-toolkit-for-aws amazon-aurora-mysql

Checked the catalogued skill at amazon-aurora-mysql.

SkillTrust corpus scan 7 November 2026 v0.13.0 via skillsh Verify on GitHub
D AI-triaged 13
D Security

D; retained sample includes a high finding · SD-007 · what this rule accepts as a false positive →

D Permissions

D; retained sample includes a high finding · SD-003 · what this rule accepts as a false positive →

B Transparency

B; retained sample includes a medium finding · SD-007 · what this rule accepts as a false positive →

showing 10 of 13
permission_hygienehigh SD-003
references/commitment-pricing-mechanics.md
permission_hygienehigh SD-003
references/create-instructions.md
permission_hygienehigh SD-003
references/create-instructions.md
permission_hygienehigh SD-003
references/create-instructions.md
permission_hygienehigh SD-003
references/create-instructions.md
permission_hygienehigh SD-003
references/io-optimized-pricing-tables.md
permission_hygienehigh SD-003
references/upgrade-planning-prechecks-mysql.md
permission_hygienehigh SD-003
references/upgrade-planning-prechecks-mysql.md
transparencymedium SD-007
references/upgrade-planning-prechecks-mysql.md
securityhigh SD-007
scripts/acu_calculator.py
2 suppressed by AI triage
permission_hygienehigh SD-003 benign_example
references/commitment-pricing-instructions.md

The detected path traversal is only within a documentation link, not executable code, so it poses no real threat.

permission_hygienehigh SD-003 benign_example
references/serverless-advisory-formulas-and-examples.md

The '..' appears only in a markdown link within documentation, not executable code or a real file system reference.