{"id":"cmuxik3lc0oklad071c48grdt","slug":"amazon-bedrock","publicId":"83621bc0-b54c-49a1-ba1e-d2e4ab70eb96","name":"amazon-bedrock","description":"Builds generative AI applications on Amazon Bedrock. Covers model invocation (Converse API, InvokeModel), RAG with Knowledge Bases, Bedrock Agents, Guardrails, and AgentCore (including the Harness managed agent loop). Applies when invoking models, setting up Knowledge Bases, creating agents, applying guardrails, deploying to AgentCore, migrating/porting/converting a Bedrock Agent (including inline agents) to an AgentCore Harness, troubleshooting Bedrock errors (ThrottlingException, AccessDeniedException), or choosing models (Claude, Llama, Nova, Titan). Also for prompt caching, quota and throttling diagnosis, cost tracking, migrating between Claude model generations (4.5 to 4.6 to 4.7), chunking strategies, API selection (Converse vs InvokeModel), guardrail capabilities, and model selection. Also covers AgentCore Payments (x402, microtransactions, Payment Manager, Connector, Instrument, Coinbase CDP, Stripe Privy, paid endpoints, agent payments). NOT for custom model training, Rekognition, or Comprehend.","version":"6","author":"aws","license":"Apache-2.0","compatibility":"","status":"completed","overallGrade":"F","scannerVersion":11,"fileCount":37,"hasSkillMd":true,"hasScripts":true,"hasReferences":true,"hasEvals":false,"hasAssets":true,"sourceType":"github","sourceUrl":"https://github.com/aws/agent-toolkit-for-aws/tree/main/plugins/aws-core/skills/amazon-bedrock","createdAt":"2026-10-07T02:53:54.766Z","completedAt":"2026-10-07T02:53:54.675Z","visibility":"public","publishedAt":"2026-08-25T20:15:11.563Z","category":"","frameworks":[],"badgeStatus":"flagged","downloadCount":0,"verdictRationale":{"summary":"Skill failed: 1 hard fail in security or structure checks.","verdict":"fail","scanners":[{"source":"vettd","weight":1,"verdict":"fail"},{"source":"cisco","weight":0.8,"verdict":"fail"}],"consensus":"fail","warnTriggers":["Embedded prompt-template marker","Embedded chat-template special token","Embedded prompt-template marker","Embedded prompt-template marker","Embedded chat-template special token","References external URL — review for indirect prompt injection risk"],"policyVersion":"consensus-v1","hardFailTriggers":["Cloud credential file access"]},"verdictPolicyVersion":"consensus-v1","skillId":"cmt93tjv630xmad09e7zu8k38","findings":[{"id":"cmuxik3lc0okmad07o5op6xfg","source":"vettd","category":"security","label":"Cloud credential file access","detail":"Detected in scripts/fetch_bedrock_agent.py:23 — `keys in ~/.aws/credentials.`","severity":"critical","ruleId":"VTD-0005","owaspLlmCategory":null,"intent":"negligent","chainId":null,"fingerprint":"d10baf0eefd48e4cbfd33614f9d6c966","filepath":"scripts/fetch_bedrock_agent.py"},{"id":"cmuxik3ld0okuad07utwg7ipi","source":"cisco","category":"security","label":"PROMPT INJECTION detected by YARA","detail":"references/managed-knowledge-bases-setup.md:101 — Generic prompt injection patterns: Do not tell the user","severity":"critical","ruleId":"YARA_prompt_injection_generic","owaspLlmCategory":null,"intent":null,"chainId":null,"fingerprint":"7ee51b16e2de0dbfd390c7a328363079","filepath":"references/managed-knowledge-bases-setup.md"},{"id":"cmuxik3lc0okoad07ykp7uee1","source":"vettd","category":"security","label":"Embedded chat-template special token","detail":"Detected in references/model-invocation.md:86 (6 matches) — `**meta llama**: uses `prompt` string with `max_gen_len` and `temperature`. llama 2 uses `[inst]...[/inst]` prompt wrappi`","severity":"medium","ruleId":"VTD-0076","owaspLlmCategory":null,"intent":null,"chainId":null,"fingerprint":"6854456ea348a47b3b45e59d2e103cb5","filepath":"references/model-invocation.md"},{"id":"cmuxik3ld0okrad077s75bjei","source":"vettd","category":"security","label":"Embedded chat-template special token","detail":"Detected in references/prompt-engineering-by-model.md:18 (9 matches) — `- **llama**: wraps in `<|start_header_id|>system<|end_header_id|>` block inside the prompt string`","severity":"medium","ruleId":"VTD-0076","owaspLlmCategory":null,"intent":null,"chainId":null,"fingerprint":"70d3ec129395ab8a6a95485aa0f72bde","filepath":"references/prompt-engineering-by-model.md"},{"id":"cmuxik3lc0oknad076w0qkyy4","source":"vettd","category":"security","label":"Embedded prompt-template marker","detail":"Detected in references/model-invocation.md:86 (2 matches) — `**meta llama**: uses `prompt` string with `max_gen_len` and `temperature`. llama 2 uses `[inst]...[/inst]` prompt wrappi`","severity":"medium","ruleId":"VTD-0075","owaspLlmCategory":null,"intent":null,"chainId":null,"fingerprint":"a566535d4b37ab46c83727e037dd20dc","filepath":"references/model-invocation.md"},{"id":"cmuxik3ld0okpad07hzlbvfh8","source":"vettd","category":"security","label":"Embedded prompt-template marker","detail":"Detected in references/prompt-engineering-by-model.md:74 — `- **llama 3+ uses `<|begin_of_text|>`, `<|start_header_id|>`, `<|end_header_id|>`, `<|eot_id|>` tokens.** the older llam`","severity":"medium","ruleId":"VTD-0075","owaspLlmCategory":null,"intent":null,"chainId":null,"fingerprint":"ee0d2113dc56f38413a074f65fce8065","filepath":"references/prompt-engineering-by-model.md"},{"id":"cmuxik3ld0okqad070a3tycmn","source":"vettd","category":"security","label":"Embedded prompt-template marker","detail":"Detected in references/prompt-engineering-by-model.md:74 — `- **llama 3+ uses `<|begin_of_text|>`, `<|start_header_id|>`, `<|end_header_id|>`, `<|eot_id|>` tokens.** the older llam`","severity":"medium","ruleId":"VTD-0075","owaspLlmCategory":null,"intent":null,"chainId":null,"fingerprint":"ee0d2113dc56f38413a074f65fce8065","filepath":"references/prompt-engineering-by-model.md"},{"id":"cmuxik3ld0oksad07qebjoh2e","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088","owaspLlmCategory":null,"intent":null,"chainId":null,"fingerprint":"42638a8b7e9fc5df27449992eaebc724","filepath":"SKILL.md"},{"id":"cmuxik3ld0oktad07oqkptmzj","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE","owaspLlmCategory":null,"intent":null,"chainId":null,"fingerprint":"592f7ac7731768f0fd0bba83f30850f9","filepath":"SKILL.md"}],"scannerRuns":[{"source":"cisco","status":"success","verdict":null,"grade":"F","findingCount":2,"criticalCount":1,"highCount":1},{"source":"vettd","status":"success","verdict":null,"grade":"F","findingCount":7,"criticalCount":1,"highCount":1}],"user":{"name":"Justin Pacella","image":"https://avatars.githubusercontent.com/u/97124458?v=4"},"repository":{"owner":"aws","name":"agent-toolkit-for-aws"},"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T06:30:13.607Z","lastVerifiedAt":"2026-10-21T06:30:13.607Z","lastChangeDetectedAt":"2026-10-06T06:31:24.253Z","scannedHash":"7bbe5f85169cc357b81030c0f98c807cb0e0c427","latestUpstreamHash":"7bbe5f85169cc357b81030c0f98c807cb0e0c427","nextCheckDueAt":"2026-10-22T08:06:32.554Z"},"signalCategories":[{"category":"safety","label":"Safety","form":"graded","verdict":null,"rows":[]},{"category":"reliability","label":"Reliability & Quality","form":"graded","verdict":null,"rows":[]},{"category":"performance","label":"Performance","form":"measured","verdict":{"form":"measured","magnitudes":[{"ruleId":"performance/static-context-tokens","label":"Static context tokens","value":7223,"unit":null,"method":"tiktoken/cl100k_base/skill-md-body"}]},"rows":[{"origin":"signal","id":"cmuxik4cv0omlad07avy45lc2","subjectType":"skill_audit","subjectId":"cmuxik3lc0oklad071c48grdt","relatedType":"","relatedId":"","dataCategory":"performance","sourceClass":"scan","source":"vettd","ruleId":"performance/static-context-tokens","severity":null,"label":"Static context tokens","detail":null,"valueNum":7223,"valueText":null,"unit":null,"method":"tiktoken/cl100k_base/skill-md-body","derivation":null,"confidence":null,"sampleSize":null,"synthetic":false,"firstParty":true,"observedAt":"2026-10-07T02:53:49.000Z","payload":null},{"origin":"signal","id":"cmuxik9j80or4ad07ngrreegb","subjectType":"skill_audit","subjectId":"cmuxik3lc0oklad071c48grdt","relatedType":"","relatedId":"","dataCategory":"performance","sourceClass":"scan","source":"vettd","ruleId":"performance/progressive-disclosure","severity":null,"label":"Progressive disclosure","detail":null,"valueNum":null,"valueText":"present","unit":null,"method":null,"derivation":"read","confidence":null,"sampleSize":null,"synthetic":false,"firstParty":true,"observedAt":"2026-10-07T02:53:49.000Z","payload":null}]},{"category":"cost","label":"Cost","form":"measured","verdict":null,"rows":[]},{"category":"compatibility","label":"Compatibility","form":"unjudged","verdict":{"form":"unjudged"},"rows":[{"origin":"signal","id":"cmuxik4fp0omxad073q24g2lm","subjectType":"skill_audit","subjectId":"cmuxik3lc0oklad071c48grdt","relatedType":"","relatedId":"","dataCategory":"compatibility","sourceClass":"scan","source":"vettd","ruleId":"compatibility/declared-environment-assumptions","severity":null,"label":"Declared environment assumptions","detail":null,"valueNum":null,"valueText":"","unit":null,"method":null,"derivation":"read","confidence":null,"sampleSize":null,"synthetic":false,"firstParty":true,"observedAt":"2026-10-07T02:53:49.000Z","payload":null},{"origin":"signal","id":"cmuxik5u20ophad07un6357oz","subjectType":"skill_audit","subjectId":"cmuxik3lc0oklad071c48grdt","relatedType":"","relatedId":"","dataCategory":"compatibility","sourceClass":"scan","source":"vettd","ruleId":"compatibility/declared-name","severity":null,"label":"Declared skill name","detail":null,"valueNum":null,"valueText":"amazon-bedrock","unit":null,"method":null,"derivation":"read","confidence":null,"sampleSize":null,"synthetic":false,"firstParty":true,"observedAt":"2026-10-07T02:53:49.000Z","payload":null},{"origin":"signal","id":"cmuxik9u90oread07ud9bi69d","subjectType":"skill_audit","subjectId":"cmuxik3lc0oklad071c48grdt","relatedType":"","relatedId":"","dataCategory":"compatibility","sourceClass":"scan","source":"vettd","ruleId":"compatibility/cli-help","severity":null,"label":"CLI help","detail":null,"valueNum":null,"valueText":"present","unit":null,"method":null,"derivation":"read","confidence":null,"sampleSize":null,"synthetic":false,"firstParty":true,"observedAt":"2026-10-07T02:53:49.000Z","payload":null},{"origin":"signal","id":"cmuxikabd0ornad070vpf2ohx","subjectType":"skill_audit","subjectId":"cmuxik3lc0oklad071c48grdt","relatedType":"","relatedId":"","dataCategory":"compatibility","sourceClass":"scan","source":"vettd","ruleId":"compatibility/structured-output","severity":null,"label":"Structured output","detail":null,"valueNum":null,"valueText":"absent","unit":null,"method":null,"derivation":"read","confidence":null,"sampleSize":null,"synthetic":false,"firstParty":true,"observedAt":"2026-10-07T02:53:49.000Z","payload":null}]},{"category":"sentiment","label":"Popularity","form":"unjudged","verdict":null,"rows":[]},{"category":"characteristics","label":"Characteristics","form":"unjudged","verdict":null,"rows":[]}],"signalCount":33,"publisherSupplied":["name","description","author","version","license"]}