Is skills/aws-solution-architect safe?
This AWS Solution Architect skill appears to be a legitimate infrastructure design tool providing structured workflows for AWS architecture planning, cost optimization, and infrastructure-as-code generation. While it contains executable Python scripts and triggered some file access during installation, all activity appears benign and consistent with normal AWS development tooling.
Category Scores
Findings (3)
LOW Executable Python Scripts Present -15 ▶
The skill contains three Python scripts (architecture_designer.py, cost_optimizer.py, serverless_stack.py) that could potentially execute code. However, these appear to be legitimate AWS infrastructure analysis tools without malicious patterns.
INFO Sensitive File Access During Installation -10 ▶
Multiple sensitive files (.env, SSH keys, AWS credentials) were accessed during the installation process. This appears to be part of normal system initialization rather than skill-initiated access.
INFO Canary File Access During Setup -5 ▶
Honeypot files were accessed during system initialization but not modified or exfiltrated, indicating normal system behavior rather than malicious activity.