The Agent Skills Directory

[COMMAND_EXECUTION]: Documentation for atmos auth exec and atmos auth shell explains how to run arbitrary commands with injected cloud credentials.
[COMMAND_EXECUTION]: The aws/credential-process identity type allows the CLI to execute external helper commands to fetch credentials, using the platform's shell.
[PRIVILEGE_ESCALATION]: The aws/assume-root feature provides a path for performing high-privilege operations in AWS environments, documented with appropriate session constraints.
[INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from configuration files (atmos.yaml) and environment variables which are interpolated into its logic, creating a surface for indirect prompt injection. Boundary markers and validation commands (atmos auth validate) are provided as mitigations.

atmos-auth