skill: package awslabs/agent-plugins into dockyard

Package agent skills from awslabs/agent-plugins into the Dockyard registry.

Source

• Repo: https://github.com/awslabs/agent-plugins
• License: Apache-2.0
• Upstream HEAD (at survey time): d8952ba (2026-04-16)
• Trust signal: Official AWS Labs; 597 stars

Candidate plugins / skills

Plugins (each bundles a skills/ subfolder):

• aws-serverless — aws-lambda, api-gateway, aws-serverless-deployment, etc.
• aws-amplify
• databases-on-aws
• deploy-on-aws
• migration-to-aws
• sagemaker-ai
• amazon-location-service

Exact paths to confirm at packaging time — likely curate a subset given the size.

Acceptance criteria

• One spec.yaml per selected skill under skills/<name>/
• spec.ref pinned to an audited upstream commit SHA
• task validate-skill passes for each
• task scan-skill findings triaged
• Single PR grouping all AWS Labs skills (branch skills/awslabs)

Part of the vendor-by-vendor sweep following #466 (Trail of Bits).

Start by confirming the exact skill paths in awslabs/agent-plugins and selecting the subset to package. Create one skills//spec.yaml per selected skill with spec.ref pinned to an audited upstream commit SHA. Run task validate-skill and task scan-skill for each, triage findings, and group the work in a single skills/awslabs branch PR.