Scanned skills

aws/agent-toolkit-for-aws migrate-to-msk

Checked the catalogued skill at migrate-to-msk.

SkillTrust corpus scan 7 November 2026 v0.13.0 via skillsh Verify on GitHub
D AI-triaged 39
D Security

D; retained sample includes a high finding · SD-007 · what this rule accepts as a false positive →

D Permissions

D; retained sample includes a high finding · SD-003 · what this rule accepts as a false positive →

B Transparency

B set by findings not listed in the stored summary

showing 10 of 39
permission_hygienehigh SD-003
assets/simulation-stack.yaml
securityhigh SD-007
assets/simulation-stack.yaml
securityhigh SD-007
assets/simulation-stack.yaml
permission_hygienehigh SD-003
assets/simulation-stack.yaml
permission_hygienehigh SD-003
assets/simulation-stack.yaml
permission_hygienehigh SD-003
assets/simulation-stack.yaml
permission_hygienehigh SD-003
assets/simulation-stack.yaml
permission_hygienehigh SD-003
assets/simulation-stack.yaml
permission_hygienehigh SD-003
assets/simulation-stack.yaml
permission_hygienehigh SD-003
assets/simulation-stack.yaml
12 suppressed by AI triage
permission_hygienecritical SD-006 benign_example
references/assessment-compatibility.md

File contains documentation, no real secret present; likely a false positive.

permission_hygienecritical SD-006 benign_example
references/assessment-compatibility.md

File contains documentation, no real secret present; likely a false positive.

permission_hygienecritical SD-006 benign_example
references/simulation.md

Placeholder text indicating redacted configuration details, not an actual hardcoded secret.

permission_hygienecritical SD-006 benign_example
references/simulation.md

Placeholder text indicating redacted configuration details, not an actual hardcoded secret.

permission_hygienecritical SD-006 benign_example
references/simulation.md

Placeholder text indicating redacted configuration details, not an actual hardcoded secret.

permission_hygienecritical SD-006 benign_example
references/simulation.md

Placeholder text indicating redacted configuration details, not an actual hardcoded secret.

permission_hygienecritical SD-006 benign_example
scripts/compatibility.py

No actual secret string is visible in the file content, indicating a false positive

permission_hygienecritical SD-006 benign_example
scripts/compatibility.py

No actual secret string is visible in the file content, indicating a false positive

securityhigh SD-007 benign_example
scripts/compatibility.py

Documentation describes outbound calls; no actual code present.

securityhigh SD-007 benign_example
scripts/compatibility.py

The flagged text is a documentation note, not executable code or configuration that initiates an outbound network call.

securityhigh SD-007 benign_example
scripts/compatibility.py

The file is documentation and contains no executable code, only a placeholder statement about outbound network calls.

securityhigh SD-007 benign_example
scripts/compatibility.py

The message is part of prose explaining a detection, not a code snippet that performs network activity.