{"id":"cmuxirwqk0yv6ad0744sdpbgi","slug":"agents-build","publicId":"ef3f99f7-b9f0-4780-9b40-22eb3a564522","name":"agents-build","description":">","version":"1.0.0","author":"aws-agentcore","license":"Apache-2.0","compatibility":"","status":"completed","overallGrade":"F","scannerVersion":11,"fileCount":14,"hasSkillMd":true,"hasScripts":true,"hasReferences":true,"hasEvals":false,"hasAssets":false,"sourceType":"github","sourceUrl":"https://github.com/aws/agent-toolkit-for-aws/tree/main/plugins/aws-agents/skills/agents-build","createdAt":"2026-10-07T02:59:58.478Z","completedAt":"2026-10-07T02:59:58.475Z","visibility":"public","publishedAt":"2026-08-25T20:14:48.301Z","category":"","frameworks":[],"badgeStatus":"flagged","downloadCount":0,"verdictRationale":{"summary":"Skill has warnings: 1 warning in security or structure checks.","verdict":"warn","scanners":[{"source":"vettd","weight":1,"verdict":"warn"},{"source":"cisco","weight":0.8,"verdict":"fail"}],"consensus":"fail","warnTriggers":["References external URL — review for indirect prompt injection risk"],"policyVersion":"consensus-v1","hardFailTriggers":[]},"verdictPolicyVersion":"consensus-v1","skillId":"cmt93t2ac2zogad09jg5lbb0w","findings":[{"id":"cmuxirwqk0yvbad07l12zfxe9","source":"cisco","category":"security","label":"Direct socket connection to external server","detail":"scripts/process_payment_tool.py:63 — Pattern detected: socket.getaddrinfo(","severity":"critical","ruleId":"DATA_EXFIL_SOCKET_CONNECT","owaspLlmCategory":null,"intent":null,"chainId":null,"fingerprint":"b72796c4dc81706a05f54fb1028e440c","filepath":"scripts/process_payment_tool.py"},{"id":"cmuxirwqk0yv8ad07szb5o0my","source":"cisco","category":"security","label":"Code makes network requests","detail":"SKILL.md — Skill code makes network requests. While not controlled by allowed-tools, network access should be documented and justified in the skill description.","severity":"medium","ruleId":"VTD-0087","owaspLlmCategory":null,"intent":null,"chainId":null,"fingerprint":"bbe419cfb0687c04e7f13893e88c32c2","filepath":"SKILL.md"},{"id":"cmuxirwqk0yvcad07l1uerohx","source":"cisco","category":"security","label":"Outbound network request primitives that can transmit data externally","detail":"scripts/process_payment_tool.py:110 — Pattern detected: httpx.request(","severity":"medium","ruleId":"DATA_EXFIL_NETWORK_REQUESTS","owaspLlmCategory":null,"intent":null,"chainId":null,"fingerprint":"17dd5f846b60c1865705d2c119090670","filepath":"scripts/process_payment_tool.py"},{"id":"cmuxirwqk0yv7ad07ttxcev3x","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/browser.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088","owaspLlmCategory":null,"intent":null,"chainId":null,"fingerprint":"00629c40e3b3d4d4b82fe3f343affd69","filepath":"references/browser.md"},{"id":"cmuxirwqk0yv9ad07tolb5eav","source":"cisco","category":"security","label":"Undeclared network usage","detail":"SKILL.md — Skill code uses network libraries but doesn't declare network requirement","severity":"medium","ruleId":"TOOL_ABUSE_UNDECLARED_NETWORK","owaspLlmCategory":null,"intent":null,"chainId":null,"fingerprint":"16553ad68e1e8ade5e1f2387f1770caa","filepath":"SKILL.md"},{"id":"cmuxirwqk0yvaad07bg0ibt7q","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE","owaspLlmCategory":null,"intent":null,"chainId":null,"fingerprint":"592f7ac7731768f0fd0bba83f30850f9","filepath":"SKILL.md"}],"scannerRuns":[{"source":"cisco","status":"success","verdict":null,"grade":"F","findingCount":5,"criticalCount":1,"highCount":1},{"source":"vettd","status":"success","verdict":null,"grade":"B","findingCount":1,"criticalCount":0,"highCount":0}],"user":{"name":"Justin Pacella","image":"https://avatars.githubusercontent.com/u/97124458?v=4"},"repository":{"owner":"aws","name":"agent-toolkit-for-aws"},"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T06:43:13.629Z","lastVerifiedAt":"2026-10-21T06:43:13.629Z","lastChangeDetectedAt":"2026-10-09T05:02:28.824Z","scannedHash":"aaf72dbbcafff53ff6f0612051acc5ced89e0684","latestUpstreamHash":"aaf72dbbcafff53ff6f0612051acc5ced89e0684","nextCheckDueAt":"2026-10-22T08:00:06.265Z"},"signalCategories":[{"category":"safety","label":"Safety","form":"graded","verdict":null,"rows":[]},{"category":"reliability","label":"Reliability & Quality","form":"graded","verdict":null,"rows":[]},{"category":"performance","label":"Performance","form":"measured","verdict":{"form":"measured","magnitudes":[{"ruleId":"performance/static-context-tokens","label":"Static context tokens","value":1841,"unit":null,"method":"tiktoken/cl100k_base/skill-md-body"}]},"rows":[{"origin":"signal","id":"cmuxiry4r0yy8ad07jw4tzmix","subjectType":"skill_audit","subjectId":"cmuxirwqk0yv6ad0744sdpbgi","relatedType":"","relatedId":"","dataCategory":"performance","sourceClass":"scan","source":"vettd","ruleId":"performance/static-context-tokens","severity":null,"label":"Static context tokens","detail":null,"valueNum":1841,"valueText":null,"unit":null,"method":"tiktoken/cl100k_base/skill-md-body","derivation":null,"confidence":null,"sampleSize":null,"synthetic":false,"firstParty":true,"observedAt":"2026-10-07T02:59:54.000Z","payload":null},{"origin":"signal","id":"cmuxis1650z5zad077k0qa69k","subjectType":"skill_audit","subjectId":"cmuxirwqk0yv6ad0744sdpbgi","relatedType":"","relatedId":"","dataCategory":"performance","sourceClass":"scan","source":"vettd","ruleId":"performance/progressive-disclosure","severity":null,"label":"Progressive disclosure","detail":null,"valueNum":null,"valueText":"present","unit":null,"method":null,"derivation":"read","confidence":null,"sampleSize":null,"synthetic":false,"firstParty":true,"observedAt":"2026-10-07T02:59:54.000Z","payload":null}]},{"category":"cost","label":"Cost","form":"measured","verdict":null,"rows":[]},{"category":"compatibility","label":"Compatibility","form":"unjudged","verdict":{"form":"unjudged"},"rows":[{"origin":"signal","id":"cmuxis06i0z1iad07uxgws7js","subjectType":"skill_audit","subjectId":"cmuxirwqk0yv6ad0744sdpbgi","relatedType":"declared_tool","relatedId":"Glob","dataCategory":"compatibility","sourceClass":"scan","source":"vettd","ruleId":"compatibility/declared-required-tools","severity":null,"label":"Declared required tool","detail":null,"valueNum":null,"valueText":"Glob","unit":null,"method":null,"derivation":"read","confidence":null,"sampleSize":null,"synthetic":false,"firstParty":true,"observedAt":"2026-10-07T02:59:54.000Z","payload":null},{"origin":"signal","id":"cmuxis0hv0z2iad07nt17mfjh","subjectType":"skill_audit","subjectId":"cmuxirwqk0yv6ad0744sdpbgi","relatedType":"declared_tool","relatedId":"Read","dataCategory":"compatibility","sourceClass":"scan","source":"vettd","ruleId":"compatibility/declared-required-tools","severity":null,"label":"Declared required tool","detail":null,"valueNum":null,"valueText":"Read","unit":null,"method":null,"derivation":"read","confidence":null,"sampleSize":null,"synthetic":false,"firstParty":true,"observedAt":"2026-10-07T02:59:54.000Z","payload":null},{"origin":"signal","id":"cmuxirycg0yyzad07ujtvscug","subjectType":"skill_audit","subjectId":"cmuxirwqk0yv6ad0744sdpbgi","relatedType":"","relatedId":"","dataCategory":"compatibility","sourceClass":"scan","source":"vettd","ruleId":"compatibility/declared-environment-assumptions","severity":null,"label":"Declared environment assumptions","detail":null,"valueNum":null,"valueText":"","unit":null,"method":null,"derivation":"read","confidence":null,"sampleSize":null,"synthetic":false,"firstParty":true,"observedAt":"2026-10-07T02:59:54.000Z","payload":null},{"origin":"signal","id":"cmuxis0fg0z26ad074zaa0dzh","subjectType":"skill_audit","subjectId":"cmuxirwqk0yv6ad0744sdpbgi","relatedType":"declared_tool","relatedId":"Grep","dataCategory":"compatibility","sourceClass":"scan","source":"vettd","ruleId":"compatibility/declared-required-tools","severity":null,"label":"Declared required tool","detail":null,"valueNum":null,"valueText":"Grep","unit":null,"method":null,"derivation":"read","confidence":null,"sampleSize":null,"synthetic":false,"firstParty":true,"observedAt":"2026-10-07T02:59:54.000Z","payload":null},{"origin":"signal","id":"cmuxis0pj0z4bad079igo1s12","subjectType":"skill_audit","subjectId":"cmuxirwqk0yv6ad0744sdpbgi","relatedType":"","relatedId":"","dataCategory":"compatibility","sourceClass":"scan","source":"vettd","ruleId":"compatibility/declared-name","severity":null,"label":"Declared skill name","detail":null,"valueNum":null,"valueText":"agents-build","unit":null,"method":null,"derivation":"read","confidence":null,"sampleSize":null,"synthetic":false,"firstParty":true,"observedAt":"2026-10-07T02:59:54.000Z","payload":null},{"origin":"signal","id":"cmuxirzyo0z0vad077wsdcfdv","subjectType":"skill_audit","subjectId":"cmuxirwqk0yv6ad0744sdpbgi","relatedType":"declared_tool","relatedId":"Bash","dataCategory":"compatibility","sourceClass":"scan","source":"vettd","ruleId":"compatibility/declared-required-tools","severity":null,"label":"Declared required tool","detail":null,"valueNum":null,"valueText":"Bash","unit":null,"method":null,"derivation":"read","confidence":null,"sampleSize":null,"synthetic":false,"firstParty":true,"observedAt":"2026-10-07T02:59:54.000Z","payload":null},{"origin":"signal","id":"cmuxis16o0z66ad07k9gnfncm","subjectType":"skill_audit","subjectId":"cmuxirwqk0yv6ad0744sdpbgi","relatedType":"","relatedId":"","dataCategory":"compatibility","sourceClass":"scan","source":"vettd","ruleId":"compatibility/cli-help","severity":null,"label":"CLI help","detail":null,"valueNum":null,"valueText":"present","unit":null,"method":null,"derivation":"read","confidence":null,"sampleSize":null,"synthetic":false,"firstParty":true,"observedAt":"2026-10-07T02:59:54.000Z","payload":null},{"origin":"signal","id":"cmuxis1bs0z6jad07he6cba8i","subjectType":"skill_audit","subjectId":"cmuxirwqk0yv6ad0744sdpbgi","relatedType":"","relatedId":"","dataCategory":"compatibility","sourceClass":"scan","source":"vettd","ruleId":"compatibility/structured-output","severity":null,"label":"Structured output","detail":null,"valueNum":null,"valueText":"present","unit":null,"method":null,"derivation":"read","confidence":null,"sampleSize":null,"synthetic":false,"firstParty":true,"observedAt":"2026-10-07T02:59:54.000Z","payload":null}]},{"category":"sentiment","label":"Popularity","form":"unjudged","verdict":null,"rows":[]},{"category":"characteristics","label":"Characteristics","form":"unjudged","verdict":null,"rows":[]}],"signalCount":35,"publisherSupplied":["name","description","author","version","license"]}