aws-blocks
An agent skill by aws, from aws/agent-toolkit-for-aws. Tags: architecture, automation, cloud, local-workflow, web.
What it does
Guides building full-stack applications with AWS Blocks — an Infrastructure-from-Code framework. Applies when creating APIs, selecting Building Blocks (KVStore, DistributedTable, Database, AuthBasic, AuthCognito, Realtime, AsyncJob, FileBucket, etc.), running local development, or deploying AWS Blocks applications. Also covers AWS Blocks topics with validated, version-specific patterns that prevent common mistakes. Triggers when user mentions AWS Blocks; project has aws-blocks/ directory; code imports @aws-blocks packages.
Install
With the skills CLI, which installs into Claude Code, Codex, Cursor and other agents:
npx skills add aws/agent-toolkit-for-aws --skill aws-blocksOr copy the skill folder into Claude Code's skills directory by hand (~/.claude/skills for every project, or .claude/skills inside one):
git clone --depth 1 https://github.com/aws/agent-toolkit-for-aws
cp -r agent-toolkit-for-aws/plugins/aws-core/skills/aws-blocks ~/.claude/skills/aws-blocksSafety box score
Grade B, low risk: 14 of 100 risk points, rated 2026-10-15. The grade rates what the skill and its scripts can reach on the machine of whoever installs it, across eight categories from shell execution to secrets access. How the score works.
This skill is mostly documentation, but it points the agent at a remote `npx` scaffold and an AWS deployment workflow. The main risks are networked package execution, writing new project files/directories, and using commands that can deploy app changes to AWS if followed.
| Category | Level | Why |
|---|---|---|
| Code & shell execution | 1 (low) | The only executable actions are scaffold commands like `npx @aws-blocks/create-blocks-app my-app`, which run a package from the registry; there are no shipped scripts or code evaluators. |
| Network access | 1 (low) | `npx @aws-blocks/create-blocks-app ...` necessarily fetches from npm, and the docs also describe AWS-backed deployment workflows, but the skill itself does not include a data-sending script. |
| Filesystem reach | 1 (low) | Scaffolding writes into the current project and can add an `aws-blocks/` workspace or integrate with `amplify/backend.ts`; local mocks also persist to `.bb-data/`. |
| Secrets & credentials | 0 (none) | It advises storing API keys in `AppSetting({ secret: true })` and avoiding `.env` files, but it does not ask to read, paste, or extract secrets itself. |
| Privilege & persistence | 0 (none) | There is no request for `sudo`, global installs, services, shell startup edits, or other system-level changes. |
| Instruction hijack surface | 0 (none) | The file does not tell the agent to ignore prior instructions, hide behavior, or follow remote prompt content. |
| Irreversible actions | 1 (low) | The skill explicitly covers `npm run sandbox` and `npm run deploy` for AWS Blocks apps, so it is tied to workflows that can publish changes, though it does not automate those actions itself. |
| Transparency | 0 (none) | No binaries, minified code, base64 blobs, or unreadable installers are present; the reviewed file is plain markdown. |
Before installing
- Read `SKILL.md` and expect it to run `npx @aws-blocks/create-blocks-app` from npm.
- Use a scratch repo or throwaway branch first, since it may add an `aws-blocks/` workspace and `.bb-data/` files.
- If you plan to deploy, verify which AWS credentials/roles the agent would use before running `npm run deploy`.
Rated 2026-10-15 by an automated review of 1 file from the skill's repository.
Source
- Repository
- aws/agent-toolkit-for-aws (all skills from this repository)
- Path
- plugins/aws-core/skills/aws-blocks/SKILL.md
- Branch
- main
- Collection
- aws-core
- Updated
- 2026-09-19
Related skills
- aws-messaging-and-streaming — Guides general use of AWS messaging and streaming services.
- aws-networking — Routes AWS networking requests to the correct service skill for implementation.
- devcontainer-setup — Creates devcontainers with Claude Code, language-specific tooling (Python/Node/Rust/Go), and persistent volumes.
- rails-expert — Rails 7+ specialist that optimizes Active Record queries with includes/eager_load, implements Turbo Frames and Turbo Streams for partial page updates.
- salesforce-developer — Writes and debugs Apex code, builds Lightning Web Components, optimizes SOQL queries, implements triggers, batch jobs, platform events.
- aws-database — Routes any task involving AWS databases — choosing, comparing, recommending, getting started with.