aws-sam-bootstrap — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited aws-sam-bootstrap (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Generates SAM project artifacts for greenfield and migration scenarios. Creates the minimum required files (template.yaml, samconfig.toml, events/), validates with sam build, and configures sam deploy workflows following AWS SAM conventions.
sam init, sam deploy)sam init, sam build, sam local invoke, sam deploy)template.yaml or samconfig.toml for serverless deploymentssam local invoke for Lambda functionssam init to scaffold.template.yaml manually.Use current non-deprecated runtimes. Package type: Zip (default) or Image (container/native deps).
sam init
sam build
sam local invoke <LogicalFunctionId> -e events/event.json
sam deploy --guidedtemplate.yaml with Transform: AWS::Serverless-2016-10-31AWS::Serverless::Function and related SAM resourcessamconfig.toml with deploy defaults and environment overridesevents/event.json payload samples for local invocationsam validate and sam build before deploy.
├── template.yaml
├── samconfig.toml
└── events/
└── event.jsonSee reference templates: examples.md, migration-checklist.md
sam validate succeedssam build succeedstemplate.yaml has correct logical IDs and handlerssamconfig.toml contains deploy parameters for target environmentssam init # Interactive scaffold
sam build
sam local invoke HelloFunction -e events/event.json
sam deploy --guidedtemplate.yaml with SAM transformsamconfig.toml with stack_name, capabilities, resolve_s3events/event.json → validate with sam buildFull templates in references/examples.md.
samconfig.toml committed for deterministic deployments[default], [prod]) instead of CLI flagsCAPABILITY_IAM is required when IAM resources are createdsam deploy --guided writes local configuration; review before committing~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.