The Agent Skills Directory

[SAFE]: The skill promotes secure configuration management by explicitly stating that .env files containing bootstrap values should be gitignored, preventing the accidental exposure of account IDs and other infrastructure constants in version control.
[SAFE]: The implementation provides a robust validation mechanism (validateBootstrap) that ensures required deployment inputs are present before synthesis, which helps prevent deployment failures or incomplete infrastructure states.
[SAFE]: The code utilizes standard, well-regarded libraries (e.g., dotenv) and standard Node.js APIs for file and path operations, with no evidence of remote script execution, obfuscation, or malicious command patterns.
[INDIRECT_PROMPT_INJECTION]: The skill defines a standard surface for processing external configuration data, which is an inherent part of infrastructure-as-code tasks.
Ingestion points: The EnvironmentManager.loadEnv function reads data from local .env files and the process.env global object (SKILL.md).
Boundary markers: None; values are treated as trusted configuration inputs for the CDK application.
Capability inventory: Ingested data is used to configure CloudFront distributions and write deployment outputs to AWS SSM Parameter Store (SKILL.md).
Sanitization: The skill implements basic presence validation; content sanitization is deferred to the underlying AWS CDK and CloudFormation validation logic.

cdk-bootstrap-configuration