aws/agent-toolkit-for-aws aws-observability
Checked the catalogued skill at aws-observability.
D; retained sample includes a high finding · SD-022 · what this rule accepts as a false positive →
D; retained sample includes a high finding · SD-003 · what this rule accepts as a false positive →
A set by no findings on this axis
10 suppressed by AI triage
The "../" sequence appears only in a relative documentation link and poses no security risk.
The reference is a relative link within documentation, not code that reads files outside its own directory.
The absolute path reference is in documentation, not executed code, so it poses no real threat.
Setting the AWS_PROFILE environment variable is a normal configuration action, not a persistence mechanism.
Setting the AWS_PROFILE environment variable is a normal configuration action, not a persistence mechanism.
Function only escapes input for logs, no filesystem access.
Function only escapes input for string literal, not performing path traversal.
The script writes its output to /tmp/snaps.json, a temporary directory, which does not represent a malicious path traversal.
The code only sets environment variables for AWS_REGION and AWS_PROFILE; it does not modify shell profiles or establish persistence.
Same as finding 2: setting environment variables, not a persistence mechanism.