Skip to main content

aws-cloud-services

Enables building and managing scalable applications on AWS, covering services like S3, Lambda, and DynamoDB for cloud architecture.

Install this skill

or
20/100

Security score

The aws-cloud-services skill was audited on Feb 19, 2026 and we found 12 security issues across 3 threat categories, including 2 critical. Review the findings below before installing.

Categories Tested

Security Issues

medium line 613

Template literal with variable interpolation in command context

SourceSKILL.md
613console.log(`Event: ${eventName}, Bucket: ${bucket}, Key: ${key}`);
medium line 635

Template literal with variable interpolation in command context

SourceSKILL.md
635console.log(`Event: ${eventName}`);
medium line 1228

Template literal with variable interpolation in command context

SourceSKILL.md
1228```yaml
medium line 161

Access to hidden dotfiles in home directory

SourceSKILL.md
1612. **Shared credentials file**: ~/.aws/credentials
medium line 162

Access to hidden dotfiles in home directory

SourceSKILL.md
1623. **Shared config file**: ~/.aws/config
critical line 161

Access to AWS credentials directory

SourceSKILL.md
1612. **Shared credentials file**: ~/.aws/credentials
critical line 162

Access to AWS credentials directory

SourceSKILL.md
1623. **Shared config file**: ~/.aws/config
low line 697

Access to .env file

SourceSKILL.md
697const BUCKET_NAME = process.env.BUCKET_NAME;
low line 698

Access to .env file

SourceSKILL.md
698const TABLE_NAME = process.env.TABLE_NAME;
low line 699

Access to .env file

SourceSKILL.md
699const API_KEY = process.env.API_KEY; // Use Secrets Manager for sensitive data
low line 184

External URL reference

SourceSKILL.md
184endpoint: 'https://s3.us-west-2.amazonaws.com' // Optional custom endpoint
low line 1377

External URL reference

SourceSKILL.md
1377Value: !Sub 'https://${RestApi}.execute-api.${AWS::Region}.amazonaws.com/${Environment}'
Scanned on Feb 19, 2026
View Security Dashboard
Installation guide →