aws-sagemaker

Fail

Audited by Socket on Mar 7, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

The skill aims to provide AWS SageMaker guidance but relies on installing and using an external AWS agent plugin to perform provisioning actions. This introduces a transitive trust boundary and potential credential exposure risk without explicit credential management or least-privilege controls visible in the description. The approach is coherent only if the plugin is trusted, verifiable, version-controlled, and configured with strict IAM scopes; otherwise, the risk is elevated due to supply-chain and real AWS action capabilities. Overall, suspicious due to external plugin dependency and incomplete credential/scoped permission details.

Confidence: 72%
Audit Metadata
Analyzed At
Mar 7, 2026, 05:45 PM
Package URL
pkg:socket/skills-sh/alphaonedev%2Fopenclaw-graph%2Faws-sagemaker%2F@a2a46af949697c5b027d12e2122997e6eed3e7c9