Scanned skills
aws/agent-toolkit-for-aws aws-step-functions
Checked the catalogued skill at aws-step-functions.
F AI-triaged 2
A Security
A set by no findings on this axis
F Permissions
F; retained sample includes a critical finding · SD-004 · what this rule accepts as a false positive →
B Transparency
B; retained sample includes a medium finding · SD-007 · what this rule accepts as a false positive →
2 findings
assets/polling-loop-wait-check-choice.asl.json
references/validation-and-testing.md
2 suppressed by AI triage
assets/human-in-the-loop-with-timeout-escalation.asl.json
The endpoint is an internal AWS SQS queue used for Step Functions messaging, not a malicious external call.
assets/human-in-the-loop-with-timeout-escalation.asl.json
The call is to a legitimate internal AWS SQS queue for approval workflow, not an exfiltration or untrusted payload request.