The Agent Skills Directory

Use of Trusted External Resources: The skill refers to official AWS documentation and recommends the aws-jwt-verify library from the awslabs organization. These are well-known and reputable sources for AWS security configuration and token validation.
Secure Credential Handling: The instructions provide specific methods to avoid exposing secrets in shell history or process listings, such as using temporary files for provider details instead of passing secrets directly in command-line arguments.
Standard Infrastructure Management: The skill uses the AWS CLI for managing Cognito resources. This is a standard and expected method for interacting with AWS services in a development and administrative context.
Authentication Data Security: The skill documents how to handle external authentication data, specifically JWT tokens. It provides clear guidance on validation steps and recommends using established libraries to mitigate risks associated with processing untrusted claims.
Ingestion points: Authentication tokens (ID and access tokens) processed by backend authorizers, as described in references/api-authorization.md.
Boundary markers: The skill explicitly recommends validating standard claims such as issuer, audience, and expiration using structured validation libraries.
Capability inventory: Management of AWS Cognito configurations and API Gateway authorizers via CLI and library calls.
Sanitization: Recommendations to use verified libraries for JWT signature and claim validation, alongside advice to sanitize inputs in backend logic.

aws-auth