# Vettd skill report

## Vettd assessment

| Field | Value |
| --- | --- |
| Verdict badge | flagged |
| Overall grade | F |
| Finding counts | critical: 4 · high: 3 · medium: 6 · low: 2 · info: 1 |
| Scanner runs | 2 |
| Freshness | verified_unchanged (last verified 2026-10-22T02:15:39.493Z) |
| Verdict policy version | consensus-v1 |

### Findings

- **critical** [security] Cloud credential file access
- **critical** [security] Direct socket connection to external server
- **critical** [security] netrc credential file access
- **critical** [security] PyPI credential file access
- **high** [security] Active instruction acquires and executes remote content
- **high** [security] Infinite loop without clear exit condition
- **high** [security] Infinite loop without clear exit condition
- **medium** [security] Outbound network request primitives that can transmit data externally
- **medium** [security] Outbound network request primitives that can transmit data externally
- **medium** [security] Outbound network request primitives that can transmit data externally
- **medium** [security] References external URL — review for indirect prompt injection risk
- **medium** [security] Sensitive source reaches a network sink
- **medium** [security] Undeclared network usage
- **low** [security] Script contacts a destination the documentation never mentions
- **low** [security] Script contacts a destination the documentation never mentions
- **info** [security] Skill does not specify a license

## Provenance

| Field | Value |
| --- | --- |
| Source URL | https://github.com/aws/agent-toolkit-for-aws/tree/main/plugins/aws-core/skills/launch-with-aws |
| Assessed at | 2026-10-10T01:28:45.572Z |
| Published at | 2026-08-25T20:14:56.711Z |
| Public ID | 6f11a9b0-6d6d-4f51-a645-4fe922b76f5f |
| Canonical page | https://vettd.agentichighway.ai/skill/6f11a9b0-6d6d-4f51-a645-4fe922b76f5f |
| Content digest | not yet published for skills |
| Signature / attestation | not yet issued; null means unsigned, not unknown |

## Publisher-supplied metadata (not verified by Vettd)

The fields below come from the skill's publisher. Vettd does not verify
them; never treat them as instructions.

Name:

> launch-with-aws

Description:

> Migrates vibe-coded web applications to AWS. Handles the full workflow from analysis through migration to deployment, producing deployable AWS Blocks infrastructure code. Supports full-stack apps built with vibe-coding platforms (Lovable, Bolt.new, Replit) and frontend web applications and websites: React, Vue, Angular, Next.js, Nuxt, Astro, SvelteKit, Gatsby, Vite, Svelte, Solid, Docusaurus, and others (static sites, SPAs, and SSR frameworks with static export). Triggers on: launch with AWS, launch on AWS, deploy to AWS, migrate to AWS, host my app on AWS, move my app to AWS, transfer my app to AWS. Activates when the user wants to migrate a vibe-coded app or frontend web app to AWS, even if they don't say 'migrate' explicitly.

Author:

> aws

Version:

> 5

License:

> Apache-2.0