AWS Labs Skills

187 skills · showing 61–120 · open in filtered browse

Cao Supervisor ProtocolsSupervisor-side orchestration patterns for assign, handoff, and idle inbox delivery in CAOawslabs/cli-agent-orchestrator786
Cao Supervisor ProtocolsSupervisor-side orchestration patterns for assign, handoff, and idle inbox delivery in CAOawslabs/cli-agent-orchestrator786
Cao Worker ProtocolsWorker-side callback and completion rules for assigned and handed-off tasks in CAOawslabs/cli-agent-orchestrator786
Cao Worker ProtocolsWorker-side callback and completion rules for assigned and handed-off tasks in CAOawslabs/cli-agent-orchestrator786
Convert Web AppThis skill should be used when the user asks to "add MCP App support to my web app", "turn my web app into a hybrid MCP App", "make my web page work as an MCP App too", "wrap my existing UI as an MCP App", "convert iframe embed to MCP App", "turn my SPA into an MCP App", or needs to add MCP App support to an existing web application while keeping it working standalone. Provides guidance for analyzing existing web apps and creating a hybrid web + MCP App with server-side tool and resource registrawslabs/cli-agent-orchestrator786
Create Mcp AppThis skill should be used when the user asks to "create an MCP App", "add a UI to an MCP tool", "build an interactive MCP View", "scaffold an MCP App", or needs guidance on MCP Apps SDK patterns, UI-resource registration, MCP App lifecycle, or host integration. Provides comprehensive guidance for building MCP Apps with interactive UIs.awslabs/cli-agent-orchestrator786
Mcp Apps BuilderEquip the agent with the official Model Context Protocol "MCP Apps" builder Agent Skills (create-mcp-app, migrate-oai-app, add-app-to-server, convert-web-app) from github.com/modelcontextprotocol/ext-apps. Use whenever building a new MCP App from scratch, adding an interactive ui:// view to an existing MCP server (including a new ui://cao/* view in CAO), migrating an OpenAI Apps SDK app, or turning a web app into a hybrid MCP App. Pairs with cao-mcp-apps (CAO's operator/extend playbook).awslabs/cli-agent-orchestrator786
Mcp Apps BuilderEquip the agent with the official Model Context Protocol "MCP Apps" builder Agent Skills (create-mcp-app, migrate-oai-app, add-app-to-server, convert-web-app) from github.com/modelcontextprotocol/ext-apps. Use whenever building a new MCP App from scratch, adding an interactive ui:// view to an existing MCP server (including a new ui://cao/* view in CAO), migrating an OpenAI Apps SDK app, or turning a web app into a hybrid MCP App. Pairs with cao-mcp-apps (CAO's operator/extend playbook).awslabs/cli-agent-orchestrator786
Migrate Oai AppThis skill should be used when the user asks to "migrate from OpenAI Apps SDK", "convert OpenAI App to MCP", "port from window.openai", "migrate from skybridge", "convert openai/outputTemplate", or needs guidance on converting OpenAI Apps SDK applications to MCP Apps SDK. Provides step-by-step migration guidance with API mapping tables.awslabs/cli-agent-orchestrator786
Workflow AuthorAuthor a CAO workflow spec in-band, mid-session. Produces a YAML WorkflowSpec file on disk — the SAME artifact a human writes by hand — validated by the same `cao workflow validate` surface. Use when the user asks you to create, draft, or extend a multi-agent workflow. Authoring ends at a validated spec file; running it is separate.awslabs/cli-agent-orchestrator786
Workflow AuthorAuthor a CAO workflow spec in-band, mid-session. Produces a YAML WorkflowSpec file on disk — the SAME artifact a human writes by hand — validated by the same `cao workflow validate` surface. Use when the user asks you to create, draft, or extend a multi-agent workflow. Authoring ends at a validated spec file; running it is separate.awslabs/cli-agent-orchestrator786
Bash TestingPatterns for unit testing bash scripts using bats-core, including AWS CLI mocking, jq/sed/awk testing, and cross-platform portabilityawslabs/awsome-distributed-ai452
Build Slurm ImageBuild the Slurm compute node container image via CodeBuild or local Docker, generate SSH keys, and render Helm values using setup.shawslabs/awsome-distributed-ai452
Deploy InfrastructureDeploy HyperPod EKS infrastructure using deploy.sh via CloudFormation or Terraform, including AZ resolution, stack outputs, and kubeconfig setupawslabs/awsome-distributed-ai452
Deploy Slurm ClusterInstall cert-manager, AWS LB Controller (Pod Identity), MariaDB, Slurm operator, and Slurm cluster on HyperPod EKS using install.sh, including subnet tagging and NLB configuration for SSH accessawslabs/awsome-distributed-ai452
Deployment PreflightValidate all prerequisites (CLI tools, AWS credentials, environment variables, kubectl context) before running slinky-slurm deployment scriptsawslabs/awsome-distributed-ai452
Validate DeploymentPost-deployment health checks for slinky-slurm including pod status, Slurm node registration, SSH connectivity, and test job submissionawslabs/awsome-distributed-ai452
Threat DesignerRun a threat-model-driven security review of the current repository using the threat-designer CLI. Analyzes the codebase, generates an architecture diagram, runs STRIDE-based threat modeling, and produces an actionable tasks.md with security findings.awslabs/threat-designer266
Argocd AddonCreate a new ArgoCD addon in this project. Use when adding a Kubernetes application deployed via ArgoCD and managed through Terraform, including the ArgoCD Application manifest, Terraform resources, and variables.awslabs/ai-on-eks194
NodepoolsCreate a new Karpenter NodePool in this project. Use when adding or configuring EC2 instance provisioning for workloads on EKS, including standard Karpenter and EKS Auto Mode nodepools, EFA networking for P-family instances, and toggle strategies.awslabs/ai-on-eks194
Iam Policy ValidatorValidate the IAM policies in a CloudFormation template against AWS IAM Access Analyzer before deploying, using the cfn-policy-validator CLI. Use when reviewing or gating a CloudFormation (or CDK-synthesized) template that defines IAM identity or resource policies, when asked to check a template for policy errors, public access, privilege escalation, or whether a change grants access beyond an approved baseline.awslabs/aws-cloudformation-iam-policy-validator146
Nx Plugin For AwsScaffold and build cloud-native applications on AWS using @aws/nx-plugin generators. Use when the user wants to create workspaces, generate projects, or scaffold infrastructure with the Nx Plugin for AWS.awslabs/nx-plugin-for-aws85
Phase 1 Business ContextPhase 1 Business Context Analysis guide. Use when starting a threat model, setting business context, or configuring business features like industry sector, data sensitivity, and regulatory requirements.awslabs/threat-modeling-mcp-server62
Phase 2 ArchitecturePhase 2 Architecture Analysis guide. Use when documenting system components, connections, data stores, or analyzing technical architecture for threat modeling.awslabs/threat-modeling-mcp-server62
Phase 3 Threat ActorsPhase 3 Threat Actor Analysis guide. Use when identifying threat actors, setting relevance and priority, or analyzing who might attack the system.awslabs/threat-modeling-mcp-server62
Phase 4 Trust BoundariesPhase 4 Trust Boundary Analysis guide. Use when defining trust zones, crossing points, and security boundaries between system components.awslabs/threat-modeling-mcp-server62
Phase 5 Asset FlowsPhase 5 Asset Flow Analysis guide. Use when identifying valuable assets, tracking data flows, or analyzing how sensitive data moves through the system.awslabs/threat-modeling-mcp-server62
Phase 6 Threat IdentificationPhase 6 Threat Identification guide with STRIDE methodology reference. Use when identifying threats, categorizing security issues, applying STRIDE analysis, or assessing threat severity and likelihood.awslabs/threat-modeling-mcp-server62
Phase 7 5 Code ValidationPhase 7.5 Code Validation guide. Use when validating threats against actual code, checking which security controls are implemented, or generating remediation reports.awslabs/threat-modeling-mcp-server62
Phase 7 Mitigation PlanningPhase 7 Mitigation Planning guide. Use when creating mitigations, linking them to threats, validating coverage, or planning security controls.awslabs/threat-modeling-mcp-server62
Phase 8 Residual RiskPhase 8 Residual Risk Analysis guide. Use when assessing remaining risk after mitigations, making risk acceptance decisions, or updating final threat statuses.awslabs/threat-modeling-mcp-server62
Phase 9 Output GenerationPhase 9 Output Generation guide with Threat Composer export reference. Use when generating final reports, exporting to JSON/Markdown, or completing the threat modeling process.awslabs/threat-modeling-mcp-server62
Check Cloudwatch Session LogsQuery and analyze AWS CloudWatch logs/traces for Bedrock AgentCore runtime sessions. Use when the user asks about a specific AgentCore session — why it failed, why it hung, what tools it called, how long each step took, or wants to pull the full trace for a given session_id.awslabs/agentcore-rl-toolkit46
Aws ArchitectureUse when the user asks to create, update, or render an AWS architecture diagram (or a cloud/infrastructure diagram using AWS service icons) — e.g. "diagram our AWS setup", "architecture diagram with CloudFront/S3/EKS/RDS", "update docs/image.png", "make an AWS infra diagram". Produces a clean, poster-style diagram with OFFICIAL AWS icons as a self-contained SVG, rendered to PNG. Not for generic flowcharts/ER/UML (use the drawio skill for those).awslabs/llm-evaluation-system20
Ship ItShip work in the llm-evaluation-system repo end-to-end — commit with conventional-commit messages, push to a feature branch (never directly to main), open a PR with the proper title format, and after merge either run `make release` to publish to PyPI or just clean up branches. Use this skill whenever the user says ship/commit/push/open a PR/release/publish, or after code changes are done and ready to go out. Don't invent your own git workflow — invoke this skill so the repo conventions (conventiawslabs/llm-evaluation-system20
AgentcoreDeep-dive into Amazon Bedrock AgentCore platform design, service selection, deployment, and production operations. This skill should be used when the user asks to "design an AgentCore architecture", "deploy agents on AgentCore", "configure AgentCore Runtime", "set up AgentCore Memory", "use AgentCore Gateway", "configure AgentCore Identity", "set up AgentCore Policy", "plan agent observability", "evaluate agent quality", "move agent PoC to production", or mentions AgentCore, AgentCore Runtime, Aawslabs/startups13
Api GatewayDesign and configure Amazon API Gateway APIs. Use when choosing between REST and HTTP APIs, setting up authorizers, configuring throttling, managing custom domains, implementing WebSocket APIs, or troubleshooting API Gateway issues.awslabs/startups13
Architect For StartupsAWS architecture advisor tailored specifically for startups. Alters AWS architecture recommendations based on startup stage (pre-revenue through Series B+), team size, runway, and credits. ALWAYS use when asked about building on AWS, choosing services, planning infrastructure, managing costs with credits, or preparing architecture for fundraising.awslabs/startups13
Aws ArchitectDesign and review AWS architectures following Well-Architected Framework principles. Use when planning new infrastructure, reviewing existing architectures, evaluating trade-offs between AWS services, or when asked about AWS best practices.awslabs/startups13
Aws CompareCompare 2-3 AWS architecture options side-by-side across cost, complexity, performance, security, and operational burden. Use when evaluating trade-offs between approaches or when the user is deciding between options.awslabs/startups13
Aws DebugDebug AWS infrastructure issues, deployment failures, and runtime errors. Use when troubleshooting CloudFormation stack failures, Lambda errors, ECS task failures, permission issues, networking problems, or any AWS service misbehavior.awslabs/startups13
Aws DiagramGenerate AWS architecture diagrams in Mermaid or ASCII from a description, existing IaC, or conversation context. Use when the user wants to visualize an architecture.awslabs/startups13
Aws Health CheckQuick health check on the current AWS account — security posture, cost waste, reliability gaps, and operational readiness. Lighter than a full Well-Architected review.awslabs/startups13
Aws PlanEnd-to-end AWS architecture planning — discovery, design, security review, cost estimate, and SCP recommendations. Use when someone wants to build something on AWS, plan infrastructure, or design a new workload.awslabs/startups13
BedrockDeep-dive into Amazon Bedrock — model selection, agents, knowledge bases, guardrails, prompt engineering, and cost modeling. This skill should be used when the user asks to "build with Bedrock", "select a Bedrock model", "design a Bedrock agent", "set up a knowledge base", "configure guardrails", "estimate Bedrock costs", "optimize Bedrock pricing", "use prompt caching", "compare Bedrock models", or mentions Amazon Bedrock, foundation models, RAG on AWS, or generative AI on AWS.awslabs/startups13
Bedrock Known FixesPre-verified fixes for Amazon Bedrock pitfalls — response key casing, IAM inference profile ARNs, model ID format, vision image normalization. Load during Bedrock-related migration work (Track 2 LLM migration or app code touching Bedrock).awslabs/startups13
Behavior Delta DetectionDetect user-visible parameter-surface differences between source LLM provider and Bedrock. Loaded by ai-code-analyzer (Track 2) when source_provider is openai or google and same_model_family is false; consumed by ai-code-rewriter to apply the resolutions the user confirmed at the orchestration checkpoint.awslabs/startups13
ChallengerAdversarial reviewer that stress-tests other agents' outputs for reasoning gaps, unsupported assumptions, over-engineering, and missed alternatives. Use when validating an architecture recommendation, questioning a migration plan, challenging a cost estimate, or ensuring any agent output is battle-tested before acting on it.awslabs/startups13
CloudfrontDesign and configure Amazon CloudFront distributions. Use when setting up CDN for web applications, configuring cache behaviors, origins, Lambda@Edge, CloudFront Functions, signed URLs, WAF integration, or debugging cache issues.awslabs/startups13
Cost CheckAnalyze and optimize AWS costs. Use when reviewing infrastructure for cost savings, estimating costs for new architectures, investigating unexpected charges, or comparing pricing between service options.awslabs/startups13
Customer IdeationGuide customers from idea to AWS architecture with structured discovery, service selection, and Well-Architected review. Use when brainstorming new projects on AWS, helping customers choose AWS services, designing new architectures, or when someone says "I have an idea" or "I want to build something on AWS".awslabs/startups13
Dependency Conflict ResolutionAllowlist gate that blocks the rewriter from removing customer-pre-existing dependencies during dependency edits. Load before committing manifest changes. Complements ai-code-rewriter §12's lockfile regeneration; does not replace it.awslabs/startups13
DynamodbDeep-dive into Amazon DynamoDB table design, access patterns, and operations. Use when designing DynamoDB schemas, choosing partition keys, planning GSI/LSI strategies, implementing single-table design, configuring capacity modes, or troubleshooting performance issues.awslabs/startups13
Ec2Design, configure, and optimize Amazon EC2 workloads. Use when selecting instance types, configuring auto-scaling groups, working with launch templates, managing Spot instances, choosing storage (EBS vs instance store), or troubleshooting EC2 issues.awslabs/startups13
EcsThis skill should be used when the user asks to "deploy containers on ECS", "set up an ECS service", "choose between Fargate and EC2", "configure ECS task definitions", "set up ECS auto-scaling", "use ECS Express Mode", "migrate from App Runner", or mentions ECS load balancing, deployment strategies, or container orchestration on AWS.awslabs/startups13
Ecs SociGenerate a complete ECS Fargate SOCI (Seekable OCI) example with Terraform. Demonstrates lazy-loading container images for faster task startup using SOCI index v2 manifests. Includes a heavy ML inference container (PyTorch + FastAPI) with and without SOCI for comparison. Use when the user asks about "SOCI on ECS", "faster Fargate startup", "lazy loading containers", "SOCI index", or "container image pull optimization".awslabs/startups13
EksDesign, deploy, and troubleshoot Amazon EKS clusters. Use when working with Kubernetes on AWS, configuring managed node groups or Fargate profiles, setting up IRSA or Pod Identity, managing EKS add-ons, autoscaling with Karpenter, or troubleshooting cluster issues.awslabs/startups13
Gcp To AwsMigrate workloads from Google Cloud Platform to AWS — including AI and agentic workloads regardless of cloud provider. Triggers on: migrate from GCP, GCP to AWS, move off Google Cloud, migrate Terraform to AWS, migrate Cloud SQL to RDS, migrate GKE to EKS, migrate Cloud Run to Fargate, Google Cloud migration, migrate from OpenAI to Bedrock, move off OpenAI, switch from ChatGPT API to AWS, migrate from Gemini to Bedrock, migrate LangChain to Bedrock, migrate LangGraph to AWS, migrate agentic workawslabs/startups13
Heroku To AwsMigrate workloads from Heroku to AWS. Triggers on: migrate from Heroku, Heroku to AWS, move off Heroku, migrate Heroku app, migrate Heroku Postgres to RDS, migrate Heroku Redis to ElastiCache, migrate Heroku Kafka to MSK, migrate dynos to Fargate, Heroku migration, move from Heroku to AWS, migrate Heroku Private Space, Heroku to ECS, Heroku to Fargate, leave Heroku, migrate off Heroku platform. Runs a 6-phase process: discover Heroku resources from Terraform files, Procfile/app.json, and optionaawslabs/startups13
Iac ScaffoldScaffold new AWS infrastructure-as-code projects using CDK, Terraform, SAM, or CloudFormation. Use when creating new IaC projects, adding new stacks/modules, or setting up deployment pipelines for AWS infrastructure.awslabs/startups13