Wire
AWS Auth skill flags two destructive updates
AWS added one aws-auth skill to its Agent Toolkit, covering Cognito setup from OAuth 2.0 and passkeys through JWT authorizers, while the published skill carries two full-replacement warnings: update-user-pool-client and set-identity-pool-roles can erase omitted settings. The AWS launch notice says agents can pair the skill with IAM guardrails and CloudTrail logging through AWS MCP. For builders following the archive’s case for putting policy inside the agent harness, this is a useful reminder that procedural knowledge must encode destructive API semantics, not merely generate valid commands.