The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill references standard, official AWS SDK libraries including @aws-sdk/client-dynamodb, @aws-sdk/lib-dynamodb, and boto3. These are standard dependencies for the stated purpose of building AWS Serverless applications.
[DATA_EXPOSURE]: The code samples demonstrate the secure practice of using environment variables (process.env.TABLE_NAME) to reference infrastructure components rather than hardcoding resource names or credentials.
[INDIRECT_PROMPT_INJECTION]: The skill defines Lambda handlers that ingest untrusted data from event.body (API Gateway) and record.body (SQS). While this creates a potential attack surface for indirect prompt injection at runtime, the code snippets follow standard development patterns for serverless event processing.
Ingestion points: SKILL.md (Lines 35, 77, 142, 172) where external event data is parsed.
Boundary markers: None present in the code stubs.
Capability inventory: AWS DynamoDB interactions (GetCommand, dynamodb.Table) and logging services.
Sanitization: Not explicitly shown in the boilerplate, consistent with basic template code.

aws-serverless