Home / minorun365 / agent-builder-skills · GitHub

kb-demo-app-auth SKILL.md skillA

kb-demo-app-auth from minorun365/agent-builder-skills is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.

Install it, pinned

mdr add minorun365/agent-builder-skills/kb-demo-app-auth@git:20261024.4f54f90

Pins git:20261024.4f54f90 in mdr.lock. Pin the fingerprint instead.

Audit grade: A, 17 of 17 checks passed
Kind: SKILL.md skill
Repository: minorun365/agent-builder-skills
Path: skills/kb-demo-app-auth/SKILL.md
Versions recorded: 3
Latest version: git:20261024.4f54f90, committed Oct 24, 2026
First version recorded: Sep 20, 2026
Size: 16,147 bytes
Repository stars: 42
License: Apache-2.0

デモアプリ・Webアプリの Cognito 認証のおすすめ構成。「Googleで続ける」か「メール（パスキーかメールのワンタイムコード。パスワードなし）」の2経路をCDKとフロントでどう組むか、パスキーが動かない設定の罠、Google client secret の置き場、ログイン画面のUX規約、Googleの同意画面に出るアプリ名の扱い。新しくデモアプリを作るとき、既存アプリの認証を作り直すとき、パスキーやGoogleログインが動かないときに読む。.

Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.

What the file says

# デモアプリの Cognito 認証（おすすめ構成）

デモアプリ・Webアプリの認証は、**特に指定がなければこの構成にする**：「Googleで続ける」か「メール（パスキーかメールのワンタイムコード）」。パスワードは使わない。

動く実物は [minorun365/marp-agent](https://github.com/minorun365/marp-agent)。
迷ったら実物を読む。設計の背景は同リポジトリの `docs/authentication-options.md`。

| ファイル | 中身 |
|---|---|
| `infra/lib/auth-stack.ts` | User Pool / App Client / Google IdP / Cognito ドメイン |
| `src/components/Auth/AuthScreen.tsx` | ログイン画面（326行。移植元） |
| `src/components/Auth/AuthScreen.css` | 同スタイル |
| `infra/lambda/auth/google-idp-manager/handler.ts` | Google IdP を作るカスタムリソース |
| `infra/lambda/auth/google-link/handler.ts` | preSignUp。既存メールユーザーへGoogleを連携 |
| `infra/lambda/auth/custom-message/handler.ts` | 確認コードとログインのコードのメールを日本語にする |

---

## 1. 利用者から見た形

| 経路 | 初回 | 2回目以降 |
|---|---|---|
| Google | 「Googleで続ける」で登録とログインが同時に終わる | Google |
| メール | メールアドレスだけで登録し、確認コードを入れるとそのままログイン | メールのワンタイムコード。パスキーを登録すれば顔・指紋 |

- **パスワードは使わない。** 画面に入力欄を置かず、App Client にもパスワードの経路を開けない（下の CDK）。
- **メールのコードは Cognito 標準メールで送る**（AWSアカウントあたり1日50通）。ログインのたびに1通なので、デモ規模なら収まる。上限に近づいたら SES の本番利用申請を検討する。
- **パスキーは任意。** 登録しなくても、メールのコードで期限なく使える。
- **Google 利用者へパスキー登録を案内しない。** 本人確認は Google 側が担当している。

## 2. ログイン画面のUX規約
…

Read the whole file at its exact version.

How to install

The exact contents, by fingerprint

mdr add minorun365/agent-builder-skills/kb-demo-app-auth@sha256:8d2a7c489f245614

The line at the top of this page pins the label git:20261024.4f54f90, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.

Badge

[![mdr](https://markdownregistry.com/badge/art_ajrz3khplfjf4r3h.svg)](https://markdownregistry.com/a/art_ajrz3khplfjf4r3h)

2 badge image fetches in 30 days. What the badge shows.

Versions

The registry has recorded 3 versions of this file, between Sep 20, 2026 and Oct 24, 2026, about one every 17 days.

version	committed	commit	size	audit
git:20261024.4f54f90 latest	2026-10-24	4f54f90	16,147 B	A	view · diff
git:20260928.126737c	2026-09-28	126737c	14,691 B	A	view · diff
git:20260920.61904e5	2026-09-20	61904e5	14,726 B	A	view

Audit of the latest version

A 17 of 17 checks passed. Fixed automatic checks with no AI involved, so the same checks give the same answer every run.

pass: Frontmatter block present
pass: Frontmatter declares a name
pass: Frontmatter declares a description
pass: Size between 200 bytes and 200 KB (16147 bytes)
pass: No zero-width or bidi control characters
pass: No instruction hidden inside an HTML comment
pass: No link to an exfiltration or paste host
pass: No credential-shaped string
pass: No instruction to send local credentials anywhere
pass: No text hidden with inline styles
pass: No prompt-injection phrasing
pass: No curl or wget piped into a shell
pass: No recursive delete of root, home or parent
pass: No instruction to read or print local credentials
pass: No base64 blob over 200 characters
pass: No link to a raw IP address
pass: No script tag

Source

GitHub

minorun365/agent-builder-skills · 42 stars · license Apache-2.0 · pushed 2026-10-24 · branch main

API

GET https://markdownregistry.com/api/v1/artifacts/art_ajrz3khplfjf4r3h
GET https://markdownregistry.com/api/v1/resolve?ref=minorun365/agent-builder-skills/kb-demo-app-auth
GET https://markdownregistry.com/api/v1/blob/8d2a7c489f245614a7de22c1fc6b71d119dc5cbc4c14d742e2ba0ad4f687f2e9

Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.

Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.

More from minorun365/agent-builder-skills

cdkd-deploy SKILL.md skill

minorun365/agent-builder-skills · skills/cdkd-deploy/SKILL.md · Deploy, diff, bootstrap, inspect, roll back, or destroy AWS CDK applications with the community CDKD CLI while…