aws-ses-inbound
Fail
Audited by Socket on Mar 10, 2026
1 alert found:
Obfuscated FileObfuscated FileSKILL.md
HIGHObfuscated FileHIGH
SKILL.md
The skill's footprint is coherent with its stated purpose: setting up SES inbound with SNS delivery to a webhook. It uses official AWS tooling (awscli) and standard SES/SNS resources. The primary risks arise from handling of inbound data to an external webhook and from credential management there is limited detail on least-privilege scoping and verification hardening. Overall, the pattern is benign but warrants careful exposure controls, explicit SNS signature verification, and explicit webhook authentication/validation to reduce data exposure and abuse risk.
Confidence: 98%
Audit Metadata