Home / minorun365 / agent-builder-skills · GitHub

kb-agent-webapp-cdk SKILL.md skillA

kb-agent-webapp-cdk from minorun365/agent-builder-skills is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.

Install it, pinned

mdr add minorun365/agent-builder-skills/kb-agent-webapp-cdk@git:20261014.d8c8aa6

Pins git:20261014.d8c8aa6 in mdr.lock. Pin the fingerprint instead.

Audit grade: A, 17 of 17 checks passed
Kind: SKILL.md skill
Repository: minorun365/agent-builder-skills
Path: skills/kb-agent-webapp-cdk/SKILL.md
Versions recorded: 1
Latest version: git:20261014.d8c8aa6, committed Oct 14, 2026
Size: 23,375 bytes
Repository stars: 42
License: Apache-2.0

AIエージェントのWebアプリを「AWS CDK（デプロイはCDKD）＋ S3 ＋ CloudFront ＋ AgentCore Runtime」で組むときの全体構成。画面は S3 から静的に配信し、サーバー側の処理が要るときだけ Lambda Web Adapter（または Lambda Web Functions）を足す判断基準。スタックの分け方、BucketDeployment での配置とキャッシュ指定、SPA の振り分け、runtime-config.json で環境値を渡す型、Lambda を足すときの Function URL と CloudFront OAC の権限、フロントから AgentCore を直接呼ぶ配線、ローカル開発、デプロイ前後の検証。新しくエージェントのWebアプリを作るとき、Amplify Hosting 以外の配信基盤を選ぶとき、画面の配信に Lambda が要るか迷ったとき、CloudFront 経由の Function URL が 403 になるときに読む。.

Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.

What the file says

# CDK で組むエージェントWebアプリ（S3 配信＋AgentCore Runtime）

画面は S3 から静的に配信し、エージェントは AgentCore Runtime で動かし、ブラウザから直接呼ぶ構成。
すべて CDK で一括管理する。サーバー側の処理が要るときだけ、Lambda をパス単位で足す。

関連スキル：Runtime の細部は `kb-agentcore-cdk`、エージェント本体は `kb-strands-agentcore`、
認証は `kb-demo-app-auth`、ストリーミングの受け方は `kb-frontend-sse`、デプロイコマンドは `cdkd-deploy`。

## 1. 全体像

```
ブラウザ
  │  ① 画面（HTML/JS）と runtime-config.json
  ▼
CloudFront ──OAC──▶ S3（Vite のビルド結果と設定 JSON）
  │            └ /api/* など、サーバー処理が要るパスだけ ──OAC──▶ Lambda（6節）
  │
  │  ② Cognito でサインイン（ID/アクセストークンを取得）
  │
  │  ③ エージェント呼び出し（Authorization: Bearer <JWT>、SSE で受信）
  ▼
AgentCore Runtime（コンテナ。JWT オーソライザーが Cognito のトークンを検証）
  └ Strands Agents ＋ Bedrock のモデル
```

- **エージェントの呼び出しは CloudFront も Lambda も通さない。** ブラウザから AgentCore のエンドポイントへ直接つなぐ。
  Lambda を挟むと、応答サイズと実行時間の上限がエージェントの長い応答にそのまま効いてしまう
- **AI の応答待ちが AgentCore 側で起きるなら、画面の配信は静的ファイルで足りる。** React（Vite）の SPA は、
  ビルドすればただのファイルの集まりになる。S3 に置いて CloudFront から返せば、起動待ちも保守するサーバーも無い

### 画面の配信に Lambda が要るかの判定

判定はひとつ、**「リクエストごとに中身が変わる応答を、サーバー側で作る必要があるか」**。

| 要る（6節へ） | 要らない（S3 で足りる） |
|---|---|
| Next.js などの SSR | Vite でビルドした SPA |
| LLM の応答をサーバーで中継・加工する API | ブラウザから AgentCore を直接呼ぶ |
…

Read the whole file at its exact version.

How to install

The exact contents, by fingerprint

mdr add minorun365/agent-builder-skills/kb-agent-webapp-cdk@sha256:cc9d3ded77ee0a86

The line at the top of this page pins the label git:20261014.d8c8aa6, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.

Badge

[![mdr](https://markdownregistry.com/badge/art_jgthwwr53iijvuet.svg)](https://markdownregistry.com/a/art_jgthwwr53iijvuet)

2 badge image fetches in 30 days. What the badge shows.

Versions

The registry has recorded 1 version of this file, committed on Oct 14, 2026.

version	committed	commit	size	audit
git:20261014.d8c8aa6 latest	2026-10-14	d8c8aa6	23,375 B	A	view

Audit of the latest version

A 17 of 17 checks passed. Fixed automatic checks with no AI involved, so the same checks give the same answer every run.

pass: Frontmatter block present
pass: Frontmatter declares a name
pass: Frontmatter declares a description
pass: Size between 200 bytes and 200 KB (23375 bytes)
pass: No zero-width or bidi control characters
pass: No instruction hidden inside an HTML comment
pass: No link to an exfiltration or paste host
pass: No credential-shaped string
pass: No instruction to send local credentials anywhere
pass: No text hidden with inline styles
pass: No prompt-injection phrasing
pass: No curl or wget piped into a shell
pass: No recursive delete of root, home or parent
pass: No instruction to read or print local credentials
pass: No base64 blob over 200 characters
pass: No link to a raw IP address
pass: No script tag

Source

GitHub

minorun365/agent-builder-skills · 42 stars · license Apache-2.0 · pushed 2026-10-24 · branch main

API

GET https://markdownregistry.com/api/v1/artifacts/art_jgthwwr53iijvuet
GET https://markdownregistry.com/api/v1/resolve?ref=minorun365/agent-builder-skills/kb-agent-webapp-cdk
GET https://markdownregistry.com/api/v1/blob/cc9d3ded77ee0a8638fb8afd09533ec15dfd08e1f6d8e529c488171e173daa27

Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.

Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.

More from minorun365/agent-builder-skills

cdkd-deploy SKILL.md skill

minorun365/agent-builder-skills · skills/cdkd-deploy/SKILL.md · Deploy, diff, bootstrap, inspect, roll back, or destroy AWS CDK applications with the community CDKD CLI while…