code-agent

Warn

Audited by Socket on Mar 1, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

The artifact is a descriptive specification for an autonomous code agent workflow. It is coherently aligned with its stated purpose and contains no actionable malicious patterns, no credential access, and no external data flows. Given the absence of executables, installers, or network exfiltration instructions, the security risk is low, though the high-level description should be reviewed for potential future implementations that could introduce remote accesses or credential handling.

Confidence: 75%Severity: 75%
Audit Metadata
Analyzed At
Mar 1, 2026, 01:11 AM
Package URL
pkg:socket/skills-sh/aws-samples%2Fsample-strands-agent-with-agentcore%2Fcode-agent%2F@ae687f288099e6b4e57f64cfe5c8321e078af3bc