Scanned skills

aws/agent-toolkit-for-aws processing-s3-uploads-with-step-functions

Checked the catalogued skill at processing-s3-uploads-with-step-functions.

SkillTrust corpus scan 7 November 2026 v0.13.0 via skillsh Verify on GitHub
D AI-triaged 10
C Security

C; retained sample includes a medium finding · SD-008 · what this rule accepts as a false positive →

D Permissions

D; retained sample includes a high finding · SD-003 · what this rule accepts as a false positive →

A Transparency

A set by no findings on this axis

10 findings
permission_hygienehigh SD-003
SKILL.md
permission_hygienehigh SD-003
SKILL.md
permission_hygienehigh SD-003
SKILL.md
permission_hygienehigh SD-003
SKILL.md
permission_hygienehigh SD-003
references/iam-roles.md
permission_hygienehigh SD-003
references/iam-roles.md
permission_hygienehigh SD-003
references/iam-roles.md
permission_hygienehigh SD-003
references/iam-roles.md
securitymedium SD-008
references/iam-roles.md
permission_hygienehigh SD-003
scripts/fargate_processor.py
3 suppressed by AI triage
permission_hygienehigh SD-003 benign_example
scripts/Dockerfile

COPY to /tmp is an internal container path, not a path traversal outside the build context.

permission_hygienehigh SD-003 benign_example
scripts/Dockerfile

Using /tmp/requirements.txt for pip install is safe and does not escape the container's filesystem.

permission_hygienehigh SD-003 benign_example
scripts/lambda_function.py

No actual traversal string present, only placeholder text