aws-cognitoUse this skill for ANY task involving AWS Cognito — user pools, identity pools, authentication flows, token handling, social/enterprise federation, MFA, Lamb...
Install via ClawdBot CLI:
clawdbot install encryptshawn/aws-cognitoGrade Limited — based on market validation, documentation quality, package completeness, maintenance status, and authenticity signals.
Sends data to undocumented external endpoint (potential exfiltration)
upload → https://{domain}/saml2/idpresponse`.Calls external URL not in known-safe list
https://cognito-idp.{region}.amazonaws.com/{userPoolId}/.well-known/jwks.json`Uses known external API (expected, informational)
amazonaws.comAudited Apr 17, 2026 · audit v1.0
Generated May 6, 2026
A SaaS platform uses Cognito user pools with groups for tenant isolation, enabling self-service sign-up, role-based access control, and federation with enterprise IdPs via SAML.
A mobile app integrates with Cognito identity pools to authenticate users via Google or Facebook, obtain temporary AWS credentials, and securely access S3 and DynamoDB.
A microservices backend uses Cognito user pools to issue JWT tokens, which are validated by an API Gateway Cognito authorizer to grant access to REST endpoints.
A healthcare application enforces MFA via authenticator apps, custom attributes for patient IDs, and uses pre-token-generation Lambda triggers to meet HIPAA compliance requirements.
A multiplayer game uses Amplify Auth with Cognito for player login, identity pools to write scores to DynamoDB, and a WAF-protected custom domain for the hosted UI.
Charge customers based on monthly active users (MAUs) managed via Cognito user pools, with different plans for MFA and advanced security features.
Offer a free tier with basic email/password login and premium features requiring social login or MFA, driving conversion through enhanced user experience.
Provide white-label OIDC federation for enterprises, using Cognito as the identity broker for on-prem AD or SAML IdPs, with premium support and SLA.
💬 Integration Tip
Start with Amplify Library for frontend to simplify Cognito integration, and always use AWS SDK v3 for backend operations.
Scored May 6, 2026
Security-first skill vetting for AI agents. Use before installing any skill from ClawdHub, GitHub, or other sources. Checks for red flags, permission scope,...
Security scanner for AI agent skills. 9 built-in detection signatures. Identifies secrets, unsafe execution patterns, and prompt injection. Sub-50ms results.
Wallet anti-theft guard. One-click scan for high-risk wallet approvals to protect user assets. Use when a user asks for a wallet security check, wallet healt...
Comprehensive security audit for an agent's full skill stack. Chains scanner, differ, trust-verifier, and health-monitor into a single assessment with priori...
GEO Audit — AI Search Visibility Checker for ChatGPT, Perplexity, Claude & Gemini. 29-point GEO readiness checklist: robots.txt AI crawler access, Index...
Audit and analyze Solidity smart contracts for security vulnerabilities. Use when reviewing, auditing, or analyzing smart contracts, Solidity code, DeFi prot...