devops

Warn

Audited by Snyk on Feb 16, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill includes explicit FinOps functionality and a concrete example of creating/updating cloud budgets via the AWS Budgets API (Terraform resource aws_budgets_budget). That is a specific API for managing financial budgets (programmatic budget creation/notifications), which meets the "API to update budget" criterion for Direct Financial Execution. No payment gateways, banking APIs, crypto, or market-order APIs are present, but the budget-management API is sufficient to flag risk.

MEDIUM W013: Attempt to modify system services in skill instructions.

  • Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill includes explicit, actionable instructions and examples for system-level changes (useradd,/etc/passwd, /etc/sudoers.d, systemd service files, systemctl commands, SSH key management, sysctl edits and SSM commands that write to /opt/… and restart services), which push an agent to modify the host system state and require elevated privileges.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 16, 2026, 12:48 PM