aws-rds-database

Warn

Audited by Socket on Mar 18, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

This is documentation and example IaC/CLI usage for provisioning and managing AWS RDS instances. There is no evidence of malicious code, external downloader/executor chains, or attempts to forward credentials to attacker-controlled endpoints. The main security concerns are pedagogical: example snippets include plaintext passwords which could lead to insecure copy-paste into real environments, and a permissive security group egress rule (0.0.0.0/0) which is overly broad. The Terraform example demonstrates better practices by generating a random password and storing it in Secrets Manager. Overall the content appears benign but contains guidance that could encourage insecure user behavior if copied directly; reviewers should remove hardcoded example passwords and tighten outbound network rules in examples.

Confidence: 80%Severity: 75%
Audit Metadata
Analyzed At
Mar 18, 2026, 04:50 PM
Package URL
pkg:socket/skills-sh/aj-geddes%2Fuseful-ai-prompts%2Faws-rds-database%2F@436de7b1021b5cc030eb6a98b17dc8648517ad1b