Skip to content
/

aws-skills

aws-skills · zxkane/aws-skills · ★ 294 · last commit 2026-04-22

Primitive shape 10 total
Skills 5 Hooks 1 MCP tools 4
00

Summary

aws-skills — Summary

aws-skills is an Anthropic-format Claude Code plugin marketplace for AWS development, shipping 5 plugins (aws-common, aws-cdk, aws-cost-ops, serverless-eda, aws-agentic-ai) with 5 skills and bundled MCP server configurations covering CDK, serverless architecture, cost optimization, and Bedrock AgentCore. Each skill uses context: fork — it runs in a forked context to avoid polluting the main session. The aws-cdk-development skill has an inline PreToolUse hook that validates AWS credentials before every cdk deploy invocation (aws sts get-caller-identity). Skills specify allowed-tools: lists to constrain which MCP tools and Bash commands the agent may use. The aws-agentic-ai plugin provides comprehensive Bedrock AgentCore documentation covering Gateway, Runtime, Memory, Identity, Code Interpreter, Browser, and Observability services. With 294 stars and last commit April 2026.

Differs from seeds: No seed covers cloud infrastructure or AWS. Closest to spec-kit (skills with per-skill hooks + MCP integration), but the context: fork pattern and allowed-tools: constraint lists are AWS-specific features. The aws-common plugin's MCP-first instruction ("always verify AWS facts using MCP tools before answering") is the only example in the batch of mandatory MCP-before-response validation.

01

Overview

aws-skills — Overview

Origin

Created by zxkane (GitHub), an AWS practitioner. Current focus on CDK, serverless/event-driven architecture, cost operations, and the emerging Bedrock AgentCore platform. Licensed MIT.

Philosophy

From the README: "Claude Code plugins for AWS development with specialized knowledge and MCP server integrations, including CDK, serverless architecture, cost optimization, and Bedrock AgentCore for AI agent deployment."

The aws-cdk-development skill makes the philosophy explicit:

"Always verify AWS facts using MCP tools (mcp__aws-mcp__* or mcp__*awsdocs*__*) before answering."

This is a mandatory MCP-first pattern — the skill explicitly instructs the agent to check live AWS documentation before responding, preventing outdated advice. The aws-common dependency is automatically loaded by all other plugins, ensuring the MCP configuration is always available.

MCP-First Architecture

Unlike most frameworks that use MCP as optional tooling, aws-skills makes MCP verification mandatory before answering AWS questions. The aws-mcp-setup skill in the aws-common plugin provides step-by-step guidance for configuring MCP servers if they are unavailable.

Plugin Dependency Graph

aws-cdk → aws-common (auto-loaded)
aws-cost-ops → aws-common (auto-loaded)
serverless-eda → aws-common (auto-loaded)
aws-agentic-ai → aws-common (auto-loaded)
02

Architecture

aws-skills — Architecture

Distribution

Anthropic-format plugin marketplace.

Install

# Register marketplace
/plugin marketplace add zxkane/aws-skills

# Install plugins
/plugin install aws-common@aws-skills     # dependency, install first
/plugin install aws-cdk@aws-skills
/plugin install aws-cost-ops@aws-skills
/plugin install serverless-eda@aws-skills
/plugin install aws-agentic-ai@aws-skills

# Alternative: install individual skills via npx
npx skills add https://github.com/zxkane/aws-skills --skill aws-cdk-development

Directory Tree

.
├── .claude-plugin/marketplace.json       # Marketplace catalog
├── .claude/skills/                       # Flat skill copies (alternate install)
│   ├── aws-agentic-ai/
│   ├── aws-cdk-development/
│   ├── aws-cost-operations/
│   ├── aws-mcp-setup/
│   └── aws-serverless-eda/
├── plugins/
│   ├── aws-agentic-ai/
│   │   └── skills/aws-agentic-ai/
│   │       ├── SKILL.md
│   │       ├── cross-service/
│   │       ├── references/
│   │       ├── scripts/               # Dockerfile, Python templates
│   │       └── services/              # browser, code-interpreter, gateway, identity, memory, registry
│   ├── aws-cdk/
│   │   └── skills/aws-cdk-development/SKILL.md
│   ├── aws-common/
│   │   └── skills/aws-mcp-setup/SKILL.md
│   ├── aws-cost-ops/
│   │   └── skills/aws-cost-operations/SKILL.md
│   └── serverless-eda/
│       └── skills/aws-serverless-eda/SKILL.md
├── docs/
├── CLAUDE.md
└── README.md

Required Runtime

  • Claude Code
  • AWS CLI (aws sts get-caller-identity)
  • AWS MCP servers (various, configured via aws-mcp-setup)
  • Node.js + CDK CLI (cdk deploy, for aws-cdk plugin)
03

Components

aws-skills — Components

Skills (5)

Plugin Skill Purpose
aws-common aws-mcp-setup Configures AWS MCP servers (CDK, Pricing, Cost Explorer, CloudWatch, documentation); fallback setup guide when MCP unavailable
aws-cdk aws-cdk-development CDK infrastructure as code; TypeScript/Python CDK patterns; requires aws-mcp-setup dependency; context: fork; inline PreToolUse hook
aws-cost-ops aws-cost-operations Cost optimization, monitoring, operational excellence; 3 MCP servers (Pricing, Cost Explorer, CloudWatch)
serverless-eda aws-serverless-eda Serverless and event-driven architecture; Well-Architected Framework; Step Functions; Saga patterns; event sourcing
aws-agentic-ai aws-agentic-ai Bedrock AgentCore comprehensive guide: Gateway, Runtime, Memory, Identity, Code Interpreter, Browser, Observability

Skill Features (aws-cdk-development)

context: fork          # Runs in forked context
skills:
  - aws-mcp-setup      # Auto-loads dependency
allowed-tools:
  - mcp__cdk__*
  - mcp__aws-mcp__*
  - mcp__awsdocs__*
  - Bash(cdk *)
  - Bash(npm *)
  - Bash(aws cloudformation *)
  - Bash(aws sts get-caller-identity)
hooks:
  PreToolUse:
    - matcher: Bash(cdk deploy*)
      command: aws sts get-caller-identity --query Account --output text
      once: true

Scripts (aws-agentic-ai plugin)

File Purpose
scripts/Dockerfile.runtime-template Container template for AgentCore runtime
scripts/a2a-server-template.py Agent-to-Agent protocol server template
scripts/agui-server-template.py Agent UI server template
scripts/gateway-custom-resource-lambda.py Gateway custom resource Lambda
scripts/mcp-server-template.py MCP server template for AgentCore
scripts/runtime-fastapi-template.py FastAPI runtime template

MCP Servers Referenced

  • AWS CDK MCP (stdio)
  • AWS Pricing MCP
  • AWS Cost Explorer MCP
  • Amazon CloudWatch MCP
  • AWS Documentation MCP (mcp__aws-mcp__*, mcp__awsdocs__*)

Hooks (1 inline)

aws-cdk-development SKILL.md frontmatter:

  • PreToolUse on Bash(cdk deploy*) — runs aws sts get-caller-identity once before first CDK deploy
05

Prompts

aws-skills — Prompt Excerpts

Excerpt 1: aws-cdk-development SKILL.md — MCP-first mandate

Technique: Mandatory MCP verification before answering; explicit fallback to setup guidance.

## AWS Documentation Requirement

Always verify AWS facts using MCP tools (`mcp__aws-mcp__*` or `mcp__*awsdocs*__*`) before answering. The `aws-mcp-setup` dependency is auto-loaded — if MCP tools are unavailable, guide the user through that skill's setup flow.

Excerpt 2: aws-cdk-development SKILL.md — Resource naming constraint

Technique: Domain-specific antipattern with CRITICAL marker.

### Resource Naming

**CRITICAL**: Do NOT explicitly specify resource names when they are optional in CDK constructs.

Excerpt 3: aws-cdk-development SKILL.md frontmatter — Hook declaration

Technique: Inline skill-level hook that auto-validates credentials before destructive operations.

hooks:
  PreToolUse:
    - matcher: Bash(cdk deploy*)
      command: aws sts get-caller-identity --query Account --output text
      once: true

Excerpt 4: aws-cdk-development SKILL.md — Allowed tools constraint

Technique: Explicit tool allowlist that limits the forked context to AWS-relevant operations only.

allowed-tools:
  - mcp__cdk__*
  - mcp__aws-mcp__*
  - mcp__awsdocs__*
  - Bash(cdk *)
  - Bash(npm *)
  - Bash(npx *)
  - Bash(aws cloudformation *)
  - Bash(aws sts get-caller-identity)
09

Uniqueness

aws-skills — Uniqueness

Differs from Seeds

No seed covers AWS or cloud infrastructure. The context: fork + allowed-tools: pattern is not present in any seed — it creates a scoped, sandboxed sub-context for CDK operations that prevents tool bleed-out. The inline skill-level hooks: declaration in SKILL.md frontmatter (rather than a separate hooks.json file) is a more ergonomic pattern than spec-kit's separate hook files. The mandatory MCP-before-answering instruction ("Always verify AWS facts using MCP tools before answering") is the only example in the corpus of making MCP verification a prerequisite for response generation rather than an optional enhancement.

Positioning

The only actively maintained AWS-focused Claude Code plugin. The aws-agentic-ai plugin is uniquely forward-looking — it covers Bedrock AgentCore, a platform that enables deploying and scaling AI agents on AWS, including protocols (A2A, AG-UI, MCP). This makes aws-skills simultaneously a CDK/serverless harness and a guide for building production AI agent infrastructure.

Observable Failure Modes

  1. MCP server availability: Skills depend on AWS MCP servers that must be independently installed and configured; aws-mcp-setup provides guidance but does not auto-install.
  2. Region-specific behavior: CDK patterns and service availability differ by AWS region; skills do not account for this.
  3. Bedrock AgentCore private preview: The aws-agentic-ai plugin covers a platform that may have changed since the skills were written.

Explicit Antipatterns

  • Explicit resource naming when optional (CDK anti-pattern — causes deployment conflicts)
  • Not verifying AWS facts via MCP before answering (mandatory MCP check)
  • Running cdk deploy without valid credentials
04

Workflow

aws-skills — Workflow

CDK Development Workflow (aws-cdk-development skill)

  1. Activate skill — triggers on keywords: CDK, CloudFormation, IaC, cdk synth, cdk deploy
  2. Verify MCPaws-mcp-setup dependency auto-loads; if MCP unavailable, guides setup
  3. Get CDK guidance — uses mcp__cdk__* for construct recommendations and patterns
  4. Verify AWS facts — uses mcp__aws-mcp__* or mcp__awsdocs__* before answering
  5. Pre-deploy checkPreToolUse hook runs aws sts get-caller-identity once before first cdk deploy
  6. Deploycdk deploy

Cost Operations Workflow (aws-cost-operations skill)

Uses 3 MCP servers:

  • AWS Pricing — for cost estimation
  • AWS Cost Explorer — for cost analysis
  • Amazon CloudWatch — for monitoring and alerting

Agentic AI Workflow (aws-agentic-ai skill)

Multi-phase AgentCore deployment:

  1. Gateway configuration (REST API → MCP tools conversion)
  2. Runtime deployment (Docker containers on AgentCore Runtime)
  3. Memory configuration (conversation state)
  4. Identity setup (credential management)
  5. Observability (tracing and monitoring)

Approval Gates

  • cdk deploy gate: aws sts get-caller-identity verifies credentials before first deploy (automated, once: true)

No Spec Phase

No spec-first workflow. Workflows are reactive to user requests.

06

Memory Context

aws-skills — Memory & Context

State Storage

None. No persistent memory.

Context Injection

  • aws-mcp-setup dependency auto-loaded by all plugins ensures MCP tool access
  • context: fork on aws-cdk-development skill creates an isolated context preventing cross-contamination with other skills
  • references/ folder in aws-agentic-ai provides AgentCore service-specific reference docs

Cross-Session Handoff

None.

CLAUDE.md

The repo root includes a CLAUDE.md (not shipped as part of plugins — it is the repo's own project memory for contributors).

Context Fork Pattern

The context: fork frontmatter value is a Claude Code feature that runs the skill in a separate context. This is used by aws-cdk-development to:

  1. Load CDK-specific tools and MCP servers without polluting the main context
  2. Limit allowed tools to the CDK-relevant list
  3. Prevent CDK patterns from bleeding into non-CDK operations
07

Orchestration

aws-skills — Orchestration

Multi-Agent Pattern

None. Single agent with forked context (not a separate agent).

Execution Mode

Interactive-loop — skills activated by user request.

Isolation Mechanism

Context fork (context: fork) — not a full isolation mechanism but creates a scoped sub-context.

Multi-Model

No.

Auto-Validators

  • aws-cdk-development PreToolUse hook: aws sts get-caller-identity before cdk deploy — automated credential verification.

Prompt Chaining

No explicit chaining. The aws-mcp-setup skill dependency auto-loads before the CDK skill, creating an implicit two-stage context setup.

MCP Orchestration

The most MCP-intensive framework in the batch:

  • 4 referenced MCP servers (CDK, Pricing, Cost Explorer, CloudWatch)
  • Mandatory MCP verification before answering
  • allowed-tools: mcp__* constraint limits which MCP tools the forked context may use
08

Ui Cli Surface

aws-skills — UI / CLI Surface

CLI Binary

None from this repo. Uses AWS CLI and CDK CLI as external dependencies.

Local UI

None.

IDE Integration

Claude Code (primary). Also supports npx skills install for agentskills.io-compatible agents.

Observability

None built-in. AWS CloudWatch (via MCP) provides observability for deployed infrastructure.

Related frameworks

same archetype · same primary tool · same memory type

Superpowers ★ 207k

Enforces spec-first, TDD, and subagent-reviewed development as mandatory automatic workflows rather than optional practices.

Anthropic Skills (Official) ★ 141k

Official Anthropic reference gallery for the Agent Skills standard, spanning creative, technical, and enterprise capability…

OpenAI Skills (Official) ★ 20k

Tiered library of integration and workflow skills for Codex, with a self-bootstrapping skill-installer that lets agents discover…

daymade/claude-code-skills ★ 1.1k

52 production-hardened skills with emphasis on skill craftsmanship — a fork of Anthropic's official skill-creator with security…

Superpowers Lab ★ 344

Experimental skill incubator extending Superpowers with interactive CLI automation, on-demand MCP discovery, semantic…

openspec-skills (chyiiiiiiiiiiii) ★ 6

Ports the OpenSpec proposal/apply/archive SDD lifecycle into three plain SKILL.md files requiring zero runtime dependencies.