agents-build
Warn
Audited by Socket on Sep 16, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
BENIGN. The skill is internally consistent with an AWS AgentCore build/extension guide, and the referenced tools, credentials, and AWS data flows fit that purpose. Residual risk is medium from unpinned dependency installs, a third-party frontend clone in the payments flow, plaintext local secret handling in the manual payments path, and the fact that it enables real-world payment actions.
Confidence: 90%Severity: 56%
Audit Metadata