Scanned skills

aws/agent-toolkit-for-aws migrate-to-msk

Checked the catalogued skill at migrate-to-msk.

SkillTrust corpus scan 22 September 2026 v0.10.0 via skillsh Verify on GitHub
F AI-triaged 50
D Security

D; retained sample includes a high finding · SD-007 · what this rule accepts as a false positive →

F Permissions

F; retained sample includes a high finding · SD-003 · what this rule accepts as a false positive →

B Transparency

B set by findings not listed in the stored summary

showing 10 of 50
permission_hygienehigh SD-003
assets/simulation-stack.yaml
securityhigh SD-007
assets/simulation-stack.yaml
securityhigh SD-007
assets/simulation-stack.yaml
permission_hygienehigh SD-003
assets/simulation-stack.yaml
permission_hygienehigh SD-003
assets/simulation-stack.yaml
permission_hygienehigh SD-003
assets/simulation-stack.yaml
permission_hygienehigh SD-003
assets/simulation-stack.yaml
permission_hygienehigh SD-003
assets/simulation-stack.yaml
permission_hygienehigh SD-003
assets/simulation-stack.yaml
permission_hygienehigh SD-003
assets/simulation-stack.yaml
2 suppressed by AI triage
permission_hygienehigh SD-003 benign_example
scripts/simulation_load_test_config.py

The code explicitly checks for and rejects writes to the skill directory, preventing path traversal; the scanner misidentified a defensive check.

securityhigh SD-007 benign_example
scripts/sizing.py

The outbound call is an intentional, harmless fetch of an AWS documentation page to obtain a workbook, not a malicious payload.