giuseppe-trisciuoglio/aws-sam-bootstrap
plugins/developer-kit-aws/skills/aws/aws-sam-bootstrap/SKILL.md
Provides AWS SAM bootstrap patterns: generates `template.yaml` and `samconfig.toml` for new projects via `sam init`, creates SAM templates for existing Lambda/CloudFormation code migration, validates build/package/deploy workflows, and configures local testing with `sam local invoke`. Use when the user asks about SAM projects, `sam init`, `sam deploy`, serverless deployments, or needs to bootstrap/migrate Lambda functions with SAM templates.
$ install --global
skillsauthnpx skillsauth add giuseppe-trisciuoglio/developer-kit aws-sam-bootstrapInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 24, 2026, 8:41 PM1.8s1 file scanned
SKILL.md
- name:
- aws-sam-bootstrap
- description:
- Provides AWS SAM bootstrap patterns: generates `template.yaml` and `samconfig.toml` for new projects via `sam init`, creates SAM templates for existing Lambda/CloudFormation code migration, validates build/package/deploy workflows, and configures local testing with `sam local invoke`. Use when the user asks about SAM projects, `sam init`, `sam deploy`, serverless deployments, or needs to bootstrap/migrate Lambda functions with SAM templates.
- allowed-tools:
- Read, Write, Bash
AWS SAM Bootstrap
Overview
Generates SAM project artifacts for greenfield and migration scenarios. Creates the minimum required files (template.yaml, samconfig.toml, events/), validates with sam build, and configures sam deploy workflows following AWS SAM conventions.
When to Use
- User needs to start a new AWS SAM project (
sam init,sam deploy) - User wants to migrate existing Lambda functions or CloudFormation resources to SAM templates
- User asks about SAM CLI commands (
sam init,sam build,sam local invoke,sam deploy) - User needs to create or update
template.yamlorsamconfig.tomlfor serverless deployments - User wants to configure local testing with
sam local invokefor Lambda functions
Instructions
1) Classify Scenario
- New project: no Lambda structure exists. Run
sam initto scaffold. - Existing project migration: Lambda/CloudFormation resources exist. Create
template.yamlmanually.
2) Select Runtime and Package Type
Use current non-deprecated runtimes. Package type: Zip (default) or Image (container/native deps).
3) Bootstrap New Projects
sam init
sam build
sam local invoke <LogicalFunctionId> -e events/event.json
sam deploy --guided
4) Bootstrap Existing Projects
- Inspect current Lambda handlers, runtime, and dependency layout
- Create
template.yamlwithTransform: AWS::Serverless-2016-10-31 - Map existing resources to
AWS::Serverless::Functionand related SAM resources - Create
samconfig.tomlwith deploy defaults and environment overrides - Add
events/event.jsonpayload samples for local invocation - Validate with
sam validateandsam buildbefore deploy
5) Required Artifacts
.
├── template.yaml
├── samconfig.toml
└── events/
└── event.json
See reference templates: examples.md, migration-checklist.md
6) Validation Checklist
sam validatesucceedssam buildsucceedstemplate.yamlhas correct logical IDs and handlerssamconfig.tomlcontains deploy parameters for target environments
Examples
New SAM Project
sam init # Interactive scaffold
sam build
sam local invoke HelloFunction -e events/event.json
sam deploy --guided
Migrate Existing Lambda
- Detect handler/runtime → create
template.yamlwith SAM transform - Add
samconfig.tomlwithstack_name,capabilities,resolve_s3 - Add
events/event.json→ validate withsam build
Full templates in references/examples.md.
Best Practices
- One deployable function first, then expand; keep migration-first PRs minimal
- Keep
samconfig.tomlcommitted for deterministic deployments - Use environment-specific sections (
[default],[prod]) instead of CLI flags - Map existing handler paths to SAM conventions during migration
Constraints and Warnings
- SAM CLI must be installed locally for command execution
CAPABILITY_IAMis required when IAM resources are created- Container image packaging requires Docker availability
- Existing projects may require refactoring handler paths to match SAM conventions
sam deploy --guidedwrites local configuration; review before committing
Related Skills
giuseppe-trisciuoglio/specs-code-cleanup
development
VerifiedTrustedCommunity
Provides final code cleanup after task review approval. Removes debug logs, temporary comments, dead code, optimizes imports, and improves readability. Use when asked to clean up code, polish, finalize, tidy up, remove technical debt, or prepare code for completion after review. Not for refactoring logic or fixing bugs—focused solely on cosmetic and hygiene cleanup.
250SKILL.mdUpdated May 5, 2026
giuseppe-trisciuoglio/ralph-loop
tools
VerifiedTrustedCommunity
Ralph Wiggum-inspired automation loop for specification-driven development. Orchestrates task implementation, review, cleanup, and synchronization using a Python script. Use when: user runs /loop command, user asks to automate task implementation, user wants to iterate through spec tasks step-by-step, or user wants to run development workflow automation with context window management. One step per invocation. State machine: init → choose_task → implementation → review → fix → cleanup → sync → update_done. Supports --from-task and --to-task for task range filtering. State persisted in fix_plan.json.
250SKILL.mdUpdated May 5, 2026
giuseppe-trisciuoglio/constitution
testing
VerifiedTrustedCommunity
Creates, updates, validates, and displays the architectural DNA of a project through two shared documents: docs/specs/architecture.md (technology stack, architectural rules, security constraints, AI guardrails) and docs/specs/ontology.md (domain glossary / Ubiquitous Language). Use BEFORE brainstorm as a project setup step, or at any point in the SDD lifecycle to validate specs/tasks against architecture principles. Triggers on 'create constitution', 'update constitution', 'constitution check', 'validate against constitution', 'project principles', 'architectural guardrails', 'setup project architecture', 'define ontology'.
250SKILL.mdUpdated May 5, 2026
giuseppe-trisciuoglio/qwen-coder
tools
VerifiedTrustedCommunity
Provides Qwen Coder CLI delegation workflows for coding tasks using Qwen2.5-Coder and QwQ models, including English prompt formulation, execution flags, and safe result handling. Use when the user explicitly asks to use Qwen for tasks such as code generation, refactoring, debugging, or architectural analysis. Triggers on "use qwen", "use qwen coder", "delegate to qwen", "ask qwen", "second opinion from qwen", "qwen opinion", "continue with qwen", "qwen session".
237SKILL.mdUpdated May 5, 2026