The Agent Skills Directory

[SAFE]: The skill is a documentation and reference pattern for AWS CDK development. It demonstrates how to manage deployment inputs (bootstrap configuration) via environment variables and .env files rather than using AWS SSM lookups during synthesis.
[DATA_EXPOSURE]: The skill correctly identifies that sensitive deployment inputs should be managed through environment variables or .env files. It follows security best practices by explicitly mentioning that these local .env files should be gitignored to prevent accidental credential leakage to source control.
[COMMAND_EXECUTION]: The provided TypeScript code snippets are illustrative and used for infrastructure definition. They do not execute arbitrary shell commands or perform unsafe operations. The use of fs.readFileSync is limited to reading local configuration files specified by the developer.
[REMOTE_CODE_EXECUTION]: There are no patterns of remote code execution, external downloads, or unverifiable dependencies. The pattern focuses on standard AWS CDK and Node.js libraries (dotenv, aws-cdk-lib).
[CREDENTIALS_UNSAFE]: While the skill discusses credentials (Account IDs, ARNs), it does not hardcode them. It provides placeholders and instructions for using environment-specific variables, which is the recommended secure approach for infrastructure-as-code.

cdk-bootstrap-configuration