Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
ask-sdk-local-debug
Advanced tools
ASK SDK Local Debug is a package which enables you to test your skill code locally against your skill invocations by routing requests to your developer machine. This enables you to verify changes quickly to skill code as you can test without needing to deploy skill code to Lambda.
NOTE: Feature is currently only available to customers in the NA region(https://developer.amazon.com/en-US/docs/alexa/custom-skills/develop-skills-in-multiple-languages.html#h2-multiple-endpoints).
npm install --save ask-sdk-model@^1.29.0
npm install --save-dev ask-sdk-local-debug
The Alexa Skills Toolkit for Visual Studio offer integrated support for local debugging. To get started, please review our technical documentation on how to Test your local Alexa skill using VS Code.
NOTE: If you have existing an ASK CLI profile, you will need to sign in again using the latest version of ASK CLI (>=2.13). Once installed, simply re-run
ask configure
to re-authorize your profile for local debugging.
lambda
directory:node ./node_modules/ask-sdk-local-debug/dist/LocalDebuggerInvoker.js
--accessToken <ACCESS_TOKEN>
--skillId <SKILL_ID>
--skillEntryFile <FILE_NAME>
--handlerName <HANDLER_NAME>
--region <REGION> # Optional argument. Region defaults to NA.
1. ACCESS_TOKEN:
1. Install ASK CLI v2
2. npm install ask-cli@2 -g
3. Generate the accessToken using ASK CLI
4. ask util generate-lwa-tokens --scopes alexa::ask:skills:debug
5. You will be directed to a Login with Amazon page. Sign in and retrieve your ACCESS_TOKEN from the terminal.
2. SKILL_ID: The ID of the skill you are trying to debug. Ensure that the developer account you used to login to obtain the access token has access to this skill.
3. FILE_NAME: The path to your skill code's main file (typically `index.js`). This file or module contains the skill's handler function.
4. HANDLER_NAME: The exported handler method (typically `handler`). For example, please see the [Hello world example](https://github.com/alexa/skill-sample-nodejs-hello-world/blob/master/lambda/custom/index.js#L159).
5. REGION: The region of the developer account. The accepted values are NA(North America), FE(Far East), EU(Europe). Defaults to NA. Instructions on finding out your region can be found [here](https://developer.amazon.com/en-US/docs/alexa/ask-toolkit/vs-code-testing-simulator.html#test).
3. Configure your preferred IDE or other debugging tool to attach to the above process or execute directly from your preferred IDE. For example, in VS Code, this would be included in the launch.json
:
{
"type": "node",
"request": "launch",
"name": "Skill Debug",
"program": "<5. Program>",
"args": [
"--accessToken","<ACCESS_TOKEN>",
"--skillId", "<SKILL_ID>",
"--skillEntryFile", "<FILE_NAME>",
"--handlerName" , "<HANDLER_NAME>",
"--region", "<REGION>" # Optional argument. Region defaults to NA.
]
}
development
stage.For bug reports, feature requests and questions, we would like to hear about it. Search the existing issues and try to make sure your problem doesn’t already exist before opening a new issue. It’s helpful if you include the version of the SDK, Node.js or browser environment and OS you’re using. Please include a stack trace and reduced repro case when appropriate, too.
This SDK is distributed under the Apache License, Version 2.0, see LICENSE for more information.
FAQs
Local debug package for Alexa Skills Kit SDK
The npm package ask-sdk-local-debug receives a total of 4,997 weekly downloads. As such, ask-sdk-local-debug popularity was classified as popular.
We found that ask-sdk-local-debug demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.