amazon-cognito

Warn

Audited by Socket on Mar 4, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

Benign. The skill describes a legitimate integration workflow with Membrane for Amazon Cognito, using Membrane-managed authentication and a proxy to interact with Cognito APIs. Data flows are mediated by Membrane, credentials are not embedded in the skill, and network calls are to standard AWS Cognito endpoints via Membrane’s proxy. No red flags for malicious behavior or supply-chain abuse observed in this fragment.

Confidence: 75%Severity: 75%
Audit Metadata
Analyzed At
Mar 4, 2026, 08:57 AM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Famazon-cognito%2F@1627f5289c8c98eb232e61bc7271f653c779d74f