The Agent Skills Directory

Indirect Prompt Injection Surface: The skill outlines processes for ingesting and acting upon external data, including user identity tokens and claims. This represents an indirect prompt injection surface; however, the skill provides specific remediation guidance, such as using the aws-jwt-verify library for signature and claim validation to ensure data integrity.
Administrative Command Execution: The instructions include various CLI commands for managing cloud authentication resources. These examples demonstrate security awareness, such as advising the use of temporary files with restricted permissions to handle sensitive configuration details, which helps prevent credential exposure in logs or process lists.
Utilization of Trusted External Resources: The skill references official service documentation and established open-source libraries from trusted organizations. These resources are recommended for tasks like secure JWT verification and implementing standard authentication flows.

aws-auth