Scanned skills

aws/agent-toolkit-for-aws amazon-elasticache

Checked the catalogued skill at amazon-elasticache.

SkillTrust corpus scan 7 November 2026 v0.13.0 via skillsh Verify on GitHub
F AI-triaged 29
F Security

F; retained sample includes a high finding · SD-022 · what this rule accepts as a false positive →

F Permissions

F; retained sample includes a critical finding · SD-006 · what this rule accepts as a false positive →

A Transparency

A set by no findings on this axis

showing 10 of 29
securityhigh SD-022
references/genai/instructions.md
securityhigh SD-022
references/monitoring/alarm-packs.md
securityhigh SD-022
references/setup/create-secure-cache.md
securityhigh SD-022
references/setup/instructions.md
permission_hygienecritical SD-006
references/shared-runtime/ecs.md
permission_hygienecritical SD-006
references/shared-runtime/ecs.md
permission_hygienecritical SD-006
references/shared-runtime/ecs.md
securityhigh SD-007
references/shared-runtime/secret-injection.md
securityhigh SD-007
references/shared-runtime/secret-injection.md
securityhigh SD-007
scripts/command_classifier.py
4 suppressed by AI triage
permission_hygienehigh SD-003 benign_example
references/migration/self-managed-migration.md

Documentation example referencing a system path; not malicious.

securityhigh SD-007 benign_example
references/shared-runtime/secret-injection.md

The file is documentation describing an outbound network call, not executing code or granting permissions, so it poses no real threat.

securitycritical SD-013 benign_example
scripts/find_tunnel_host.py

The code merely calls a function to find tunnel hosts; it does not modify shell profiles or install persistence mechanisms.

permission_hygienecritical SD-004 benign_example
scripts/test_connection.py

No actual credential path referenced in the file; the match appears to be a false positive.