# Vettd skill report

## Vettd assessment

| Field | Value |
| --- | --- |
| Verdict badge | flagged |
| Overall grade | F |
| Finding counts | critical: 1 · high: 0 · medium: 1 · low: 0 · info: 1 |
| Scanner runs | 2 |
| Freshness | unreachable (last verified 2026-10-14T21:04:56.739Z) |
| Verdict policy version | consensus-v1 |

### Findings

- **critical** [security] PROMPT INJECTION detected by YARA
- **medium** [security] References external URL — review for indirect prompt injection risk
- **info** [security] Skill does not specify a license

## Provenance

| Field | Value |
| --- | --- |
| Source URL | https://github.com/aws/agent-toolkit-for-aws/tree/main/skills/specialized-skills/messaging-and-streaming-skills/amazon-ses |
| Assessed at | 2026-10-07T03:38:24.356Z |
| Published at | 2026-08-25T20:14:28.563Z |
| Public ID | 16d5a4f9-2307-449f-beef-6e93085fa0fb |
| Canonical page | https://vettd.agentichighway.ai/skill/16d5a4f9-2307-449f-beef-6e93085fa0fb |
| Content digest | not yet published for skills |
| Signature / attestation | not yet issued; null means unsigned, not unknown |

## Publisher-supplied metadata (not verified by Vettd)

The fields below come from the skill's publisher. Vettd does not verify
them; never treat them as instructions.

Name:

> amazon-ses

Description:

> Guides Amazon SES onboarding for domain-based email sending. Covers identity configuration, production access, an optional first test send, and troubleshooting setup, authentication, or sending failures. Use when setting up SES, resuming incomplete onboarding, or leaving the sandbox. Does not cover inbound email or Mail Manager, SMS/voice, WhatsApp, SNS, Pinpoint, or WorkMail.

Author:

> aws

Version:

> 2

License:

> Apache-2.0