Hands-on: Convert Templates to Skills & Design Your Agent Workflow
Group/Individual Submission & Q&A
Foundations
AI Agents vs Agentic AI
What's the difference and when does it matter?
From LLMs to Agents: Why the Shift?
LLMs alone have limitations that matter for finance operations:
No memory β can't remember previous conversations or decisions
No tools β can't query databases, call APIs, or take actions
No planning β can't break complex tasks into steps and execute them
Reliability drops as input size, task complexity, and output scope increase
The Fallacy of Composition: An LLM that writes great risk summaries can't independently manage an end-to-end merchant review. What works for individual parts won't necessarily work for the combined whole.
AI Agent vs Agentic AI
AI Agent
A single AI that can use tools to complete a specific task.
Follows a defined workflow
Uses tools (search, calculate, API calls)
Completes one task at a time
Human defines the steps
Example: A chatbot that looks up account balances and answers customer questions
Agentic AI System
Multiple AI agents working together autonomously to achieve a goal.
Plans its own approach
Breaks complex goals into subtasks
Coordinates multiple agents
Reflects and adjusts strategy
Example: A system that receives an invoice, extracts data, validates against POs, flags discrepancies, and routes for approval β all autonomously
4 Types of AI Agents
Type
How it works
AnyCompany example
Workflow
Follows a predetermined path like a recipe. Fast, predictable.
Automated KYC document verification β same steps every time
Autonomous
Self-orchestrating with memory and tools. Handles complex, open-ended tasks.
Fraud investigation that adapts its approach based on transaction patterns
Hybrid
Routes between workflow and autonomous based on complexity.
AI team β multiple agents collaborating on a shared goal.
Coordinated system across Wallet fraud, PayLater risk, and Insurance claims
Key insight: Most teams start with workflow agents and graduate to hybrid or multi-agent as they gain confidence.
4 Levels of AI Autonomy
Level
Description
AnyCompany example
L1: Human-Assisted
AI drafts, human reviews and approves everything
AI drafts merchant risk assessment, analyst reviews before sending
L2: Semi-Autonomous
AI handles routine cases, flags exceptions for humans
GREEN merchants auto-approved, AMBER/RED flagged for human review
L3: Autonomous
AI runs the full pipeline, alerts humans on exceptions only
Full invoice processing pipeline with exception alerts
L4: Multi-Agent
Multiple AI agents collaborate and adapt dynamically
Dynamic fraud detection that coordinates across payment channels
Where to start: Most finance teams should begin at L1-L2. The prompt templates you built on Day 2 are already L1 tools. Today we'll design L2-L3 workflows.
When to Use Which?
Scenario
Agent type
Autonomy
Why
Answer customer FAQs
Workflow
L2
Single task, defined scope
Classify support tickets
Workflow
L2
One-step classification
Process invoice end-to-end
Hybrid
L2-L3
Multi-step with exception handling
Fraud investigation
Autonomous
L2
Adaptive analysis, high stakes
PayLater credit assessment
Hybrid
L2
Check docs, verify, assess, recommend
Cross-channel risk monitoring
Multi-Agent
L3-L4
Coordinate Wallet + PayLater + Insurance
Key Takeaway: AI Agents vs Agentic AI
AI Agent = one skilled worker following instructions. Good for single, well-defined tasks.
Agentic AI = a team that plans, executes, and adapts. Good for multi-step workflows.
Key insight: The loop is what makes agentic AI different from a simple prompt. It can recover from errors and adapt β like a team lead who checks work and adjusts the plan.
Key Takeaway: The Agentic Loop
Every agentic system follows: Observe → Plan → Act → Reflect → Repeat
The "Reflect" step is what makes it intelligent β it can catch its own mistakes and retry
This is the same self-critique technique from Day 2, but automated
When designing workflows, ask: "What happens when a step fails?" β that's where reflection matters
The loop continues until the goal is met or a human is asked to intervene
Workflow Patterns
4 Patterns for Automation
Chaining, Parallelization, Routing, Orchestration
Why Workflow Patterns Matter
Your teams make thousands of complex decisions daily. Human cognitive load limits scalability.
Traditional Automation
Rigid if/then rules
Breaks when inputs vary
Can't handle ambiguity
Expensive to maintain
Agentic Automation
Understands context and intent
Adapts to variations in input
Handles ambiguity with reasoning
Improves with better prompts
The shift: From "program every rule" to "describe the goal and let AI figure out the steps." Your Day 2 prompt templates are the instructions that power these patterns.
The 4 Workflow Patterns
Pattern
How it works
Finance example
Prompt Chaining
Sequential steps β output of one becomes input of next
Invoice → Extract data → Validate vs PO → Generate report
Parallelization
Multiple tasks run simultaneously, results combined
Risk + Product + Compliance review a merchant application at the same time
Routing
Classify input, send to the right processing path
Classify document type → route to invoice, receipt, or contract workflow
Orchestration
Dynamic coordination β spawns subtasks based on conditions
Credit approval: auto-approve <$10K, human review >$50K, AI + human for middle
Discussion: Which of these is closest to a pain point in YOUR team? That's your candidate for the afternoon exercise.
Key Takeaway: Workflow Automation
Every workflow follows: Input → Process → Decide → Output
Each step is a prompt template (Day 2) connected by a workflow pattern
Start with the happy path β automate the 80% that's straightforward
Route exceptions to humans β don't try to automate edge cases on day one
Measure: time saved, error reduction, consistency improvement
The Kiro exercises you did (invoice processing, fraud detection) are prototypes of these workflows
Building Blocks
The Kiro Automation Stack
Steering + Skills + Hooks + MCP
The Complete Kiro Stack
4 layers, each doing one job: Steering sets the rules. Skills define the expertise. Hooks trigger automatically. MCP connects to your data. Together = an autonomous agent.
Steering & Skills: Your Agent's Brain
Steering (Global Rules)
Always-on instructions for every interaction:
Currency defaults (SGD unless specified)
PII handling rules (never expose account numbers)
Brand voice and terminology
Compliance requirements (MAS, BNM, OJK)
File: .kiro/steering/rules.md
Skills (On-Demand Expertise)
Specialized instructions for specific tasks:
Merchant risk assessment (GREEN/AMBER/RED)
Invoice validation and extraction
Fraud investigation playbook
Compliance report generation
File: .kiro/skills/[name]/SKILL.md
Day 2 β Day 3: Your prompt templates from yesterday become SKILL.md files today. Same content, new format β now they auto-activate when the right task appears.
Hooks & MCP: Your Agent's Hands
Hooks (Auto-Triggers)
Events that automatically run your skills:
File created: New invoice β run extraction skill
File edited: Data updated β re-validate
Manual trigger: User clicks β generate report
Scheduled: Daily compliance scan
MCP (Connections)
How AI connects to your real systems:
Databases: Query merchant data, transaction history
APIs: Call risk scoring engine, KYC verification
Files: Process invoice folders, read policy docs
Messaging: Send Slack alerts, email notifications
Think of it this way: Skills = the recipe. MCP = the kitchen equipment. Hooks = the timer that starts cooking automatically. You design the recipe; your tech team sets up the kitchen.
SKILL.md: Best Practices
When converting your Day 2 template to a SKILL.md file:
Element
What to include
Example
Name
Clear, descriptive skill name
Merchant Risk Assessment
Description
When this skill should activate
"Activate when analyzing merchant transaction data for risk"
Trigger
Keywords or file patterns
"merchant", "risk", "GREEN/AMBER/RED"
Instructions
Your prompt template (from Day 2)
Role, context, steps, output format, guardrails
Guardrails
What the skill must NOT do
"Never auto-approve RED merchants", "Always flag PII"
Output format
Expected structure
JSON with risk_rating, confidence, reasoning
Supervised vs Autopilot: Your Safety Net
Before we start building β here's how to stay safe when AI modifies your files.
π‘οΈ
Supervised Mode
Kiro shows every change before applying
You approve or reject each modification
Can revert individual files after approval
Like "track changes" in Word
Best for: first-time skills, high-stakes outputs, learning
vs
β‘
Autopilot Mode
Kiro works autonomously β no approval needed
Review all changes after completion
Revert any file you don't like
Sub-agents only work in Autopilot
Best for: trusted skills, routine tasks, parallelization
Nothing is irreversible. Both modes track every change. You can always revert individual files. When in doubt, use Supervised mode β you'll see exactly what the AI is about to do before it happens.
Connections
Model Context Protocol (MCP)
How AI connects to your databases, APIs, and tools
Why Does AI Need MCP?
Without MCP, AI can only work with text you paste into it. MCP changes that.
Without MCP
Export CSV β paste into chat β AI analyzes what you gave it
Open 50 invoices one by one
Check compliance in 3 systems manually
Copy transaction data, format it, paste it
With MCP
AI queries your merchant database directly
AI scans the invoice folder automatically
AI checks all 3 systems in one request
AI runs SQL query, gets exactly what it needs
Think of MCP as USB-C for AI. One standard cable connects any device to any peripheral. MCP connects any AI (Kiro, Claude, Cursor) to any data source (databases, APIs, files) with one standard protocol.
MCP Architecture
MCP follows a simple client-server pattern:
3 Core Primitives
Tools β Actions AI can perform: run SQL, call API, send message
Resources β Data AI can read: file contents, database schemas
Prompts β Reusable templates for common interactions
Key Properties
Open standard β works with Claude, Kiro, Cursor, VS Code
Local or remote β runs on your machine or on a server
Pre-built servers β community has built servers for most systems
MCP Servers for Finance Teams
MCP Server
Connects to
Finance use case
Setup
SQLite / PostgreSQL
Databases
Query merchant data, transaction history, compliance records
Config only
Filesystem
File directories
Process folders of invoices, scan regulatory documents
Config only
Slack / Teams
Team messaging
Send alerts when RED-rated merchant detected
API key
Google Drive / S3
Document storage
Read policy documents for RAG grounding, store reports
You design the recipe, your tech team sets up the kitchen. In the Agent Design Canvas, you specify "MCP connections needed: merchant database, Slack for alerts." Your engineering team configures the actual MCP servers. The open-source community has pre-built servers for most common systems β no custom code needed.
MCP Configuration: It's Just JSON
An MCP configuration in Kiro β 7 lines of JSON, no code:
What happens: Kiro launches the server, discovers tools, and you can query the database in plain English.
Key Takeaway: MCP
MCP = USB-C for AI (one standard, any connection)
3 primitives: Tools, Resources, Prompts
Pre-built servers for databases, files, APIs, messaging
You specify needs β tech team configures servers
Try the interactive MCP explainer on the workshop site
Advanced
Sub-Agents: AI Delegating to AI
When one agent isn't enough β delegate subtasks to specialized agents
What Are Sub-Agents?
A sub-agent is an AI that gets delegated a task by another AI. The main agent stays focused on the big picture while sub-agents handle specialized subtasks independently.
π§
Main Agent
"Analyze this merchant"
β
π
Context Gatherer
Find relevant files & data
β‘
Task Executor
Run analysis independently
π οΈ
Custom Agent
Specialized for your domain
β
π
Combined Result
Synthesized output
This is parallelization in action. The main agent delegates to 3 sub-agents, each runs independently with its own tools, and results are combined. Same pattern from the slides β but happening inside Kiro automatically.
Sub-Agents in Kiro Today
Type
Where it lives
How it activates
Finance example
Context Gatherer(Built-in)
Built into Kiro
Kiro uses it automatically when exploring unfamiliar code or files
"Find all files related to merchant risk"
Task Executor(Built-in)
Built into Kiro
Kiro delegates automatically when you ask for parallel tasks
"Analyze this data while I work on compliance"
Custom Agent(You create)
.kiro/agents/[name].md
You invoke by name: "use the finance-reviewer agent toβ¦"
"Review this risk assessment and score it"
Built-in: Automatic
Kiro decides when to delegate β no config needed
Works in Autopilot mode
You can also ask explicitly: "do X and Y in parallel"
Custom: You Create & Invoke
Saved as .kiro/agents/name.md β like skills
Has its own tools (can restrict to read-only)
Version in git, share with team
Invoke: "use the [name] agent to review this file"
Skills vs Custom Agents
π
Skills (.kiro/skills/)
Instructions added to Kiro's context
Uses Kiro's own tools
Auto-activates on keywords/file patterns
Best for: structured output templates
Analogy: a recipe Kiro follows
vs
π€
Custom Agents (.kiro/agents/)
Runs as a separate autonomous agent
Has its own tools (can be restricted)
Invoked by name: "use the [name] agent"
Best for: review, analysis, validation
Analogy: a colleague Kiro delegates to
Try it in Exercise 1 (Bonus Step): Create a finance-reviewer custom agent, then invoke it to review your risk assessment. The agent runs independently, scores your work, and suggests improvements.
Hands-On
Exercises & Workshop
Convert templates to skills, then design your agent workflow
Lab 8: Convert Template to SKILL.md
Turn your Day 2 prompt template into a reusable, auto-activating skill (25 min):
Step 1: Create a steering file with AnyCompany global rules (currency, PII, brand voice)
Step 2: Convert your Day 2 prompt template to SKILL.md format with frontmatter
Step 3: Add a hook for auto-triggering (e.g., "when new data file is created")
Step 4: Test the full stack β steering + skill + hook working together
What you'll have: A portable, reusable skill that auto-activates when the right task appears β the same template from Day 2, now automated.
Lab 10: Design Your Agent Workflow
Pick a real workflow from your team and fill out the Agent Design Canvas (45 min):
The Agent Design Canvas
Agent Role: What does this agent do?
Workflow Steps: What's the sequence?
Pattern: Chain / Parallel / Route / Orchestrate?
Data Inputs: What data does it need?
Data Outputs: What does it produce?
Tools/MCP: What systems does it connect to?
Guardrails: What must it NOT do?
Escalation Rules: When does a human step in?
Autonomy Level: L1 / L2 / L3?
Business Impact: Time saved, errors reduced?
Workshop: Design Your Workflow
In groups of 3-4:
Step 1: Identify (10 min)
What manual process takes the most time?
Where do errors happen most often?
What's repetitive but requires judgment?
Step 2: Map (15 min)
Draw the current process (boxes and arrows)
Label each step with a workflow pattern
Mark decision points and exception paths
Step 3: Assess (10 min)
Feasibility: Can current AI do this?
Impact: How much time/cost saved?
Risk: What if the AI gets it wrong?
Step 4: Present (5 min each)
Share your Agent Design Canvas
Get feedback and suggestions
Identify quick wins vs long-term projects
Key Takeaway: Designing AI Workflows
Best candidates for automation: repetitive, judgment-based, high-volume, error-prone
Your Agent Design Canvas is the requirements spec β share it with your tech team
Synthesis
Connecting All Three Days
From concepts to templates to autonomous systems
The 3-Day Journey
Day
What you learned
What you built
Day 1
GenAI fundamentals, Bedrock, responsible AI
Understanding of what's possible and safe
Day 2
Prompt engineering, CoT, personas, RAG
Reusable prompt templates for your team
Day 3
Agentic AI, workflow patterns, Kiro stack
SKILL.md files + Agent Design Canvas
The thread: Day 1's responsible AI principles → enforced by guardrails in your skills. Day 2's prompt templates → become Day 3's SKILL.md files. Day 2's RAG grounding → powers your workflow's data connections via MCP.
What You're Taking Home
Deliverable
Created on
Description
Prompt template
Day 2
Production-ready template with variables (merchant risk or credit risk)
SKILL.md file
Day 3
Your template converted to a portable, auto-activating skill
Steering file
Day 3
Global rules for your team (currency, PII, brand voice)
Hook configuration
Day 3
Auto-trigger that runs your skill when new data arrives
Agent Design Canvas
Day 3
One-page workflow spec: role, steps, data, guardrails, ROI
GenAI Playbook
Day 1
5-document implementation playbook from capstone lab
Day 3 Outcomes
Distinguish between AI agents and agentic AI systems
Understand the agentic loop: Observe → Plan → Act → Reflect
Identify the right workflow pattern for any business process
Convert prompt templates into reusable SKILL.md files
Use Kiro's steering + skills + hooks + MCP stack for automation
Design an AI agent for a real workflow from your team
Plan next steps for workflow automation in your organization
What to Do Next
This week: Share your Agent Design Canvas with your team. Identify one quick win to prototype.
This month: Build a prototype using Kiro. Test your SKILL.md with real data from your team.
This quarter: Pilot your highest-impact workflow at L1-L2 autonomy. Measure results.
Resources: Workshop site (exercises + slides), prompt templates, SKILL.md reference
Thank You
From prompts to templates to autonomous workflows
AnyCompany Financial Group · Generative & Agentic AI on AWS
Appendix
Amazon Bedrock AgentCore
From DIY agents to managed infrastructure
The DIY Agent Challenge
Many teams build agents from scratch. Common pain points:
Production deployment with monitoring and observability
2-4 weeks
5. Scale
Expand to more workflows, add multi-agent coordination
Ongoing
Key benefit: Start fast with Kiro (your prototype), then harden with AgentCore for production. You don't need to choose upfront β the skills you build today are portable.