aws-sagemaker
Fail
Audited by Socket on Mar 7, 2026
1 alert found:
Obfuscated FileObfuscated FileSKILL.md
HIGHObfuscated FileHIGH
SKILL.md
The skill aims to provide AWS SageMaker guidance but relies on installing and using an external AWS agent plugin to perform provisioning actions. This introduces a transitive trust boundary and potential credential exposure risk without explicit credential management or least-privilege controls visible in the description. The approach is coherent only if the plugin is trusted, verifiable, version-controlled, and configured with strict IAM scopes; otherwise, the risk is elevated due to supply-chain and real AWS action capabilities. Overall, suspicious due to external plugin dependency and incomplete credential/scoped permission details.
Confidence: 72%
Audit Metadata