Cost guardrail for AWS DevOps Agent that covers ALL AWS services and native agent tools. Before the agent makes any paid API call, this skill estimates cost, enforces budgets per investigation, detects expensive operations across all services (Athena queries, S3 scans, DynamoDB scans, SageMaker inference, PromQL, etc.), enforces time window requirements, monitors cumulative call volume, and cancels if thresholds are exceeded. This skill applies to ALL investigations regardless of which services are involved.
13711d agoReviewMountCreate a free account to mount
Use this skill for a read-only readiness review of a streaming / OTT platform before a large-scale live event (match, final, concert, launch). Trigger whenever someone asks whether they are ready for an upcoming broadcast, whether the platform will hold at peak concurrency, or for a live-event readiness review or audit — and own that end-to-end review even when the request names EKS, CloudFront, or metrics (prefer this over generic topology/metrics-exploration skills). It grades nine pillars — capacity (pre-warming, ODCRs, diversification), quotas, resilience, content delivery (Origin Shield, cache-hit ratio), networking (NAT / transit gateway), data & state, load and chaos testing, observability (viewer SLIs, alarm coverage), and event-day operations — against AWS large-scale live streaming guidance and the Streaming Media Lens, returning PASS / FAIL / N/A scorecards with severity-ranked, timeline-aware remediations. Not for active incidents or media-pipeline encode/package tuning.
13711d agoReviewMountCreate a free account to mount
Use this skill when a user is troubleshooting AWS network connectivity: a connection times out, is refused, or resets; traffic flows only one way; flow logs show REJECT and they need to know whether a security group or network ACL caused it; TCP handshakes fail; transfers are slow or retransmit; large packets hang; idle connections drop; or they want top talkers or the real source behind a NAT gateway or EKS pod. Also use it whenever the user shares or describes VPC Flow Logs or a packet capture (tcpdump, Wireshark, tshark), including traffic that is missing from flow logs or unexpected packet sizes in a capture, even if they don''t name the problem. Not for name-resolution failures such as NXDOMAIN, SERVFAIL, or a name resolving to the wrong address; use the VPC DNS investigation skill for those.
13711d agoReviewMountCreate a free account to mount
Amazon Redshift domain expertise for query optimization, operational reviews, and cost optimization on provisioned clusters and Serverless workgroups. Use when a user asks about Redshift query tuning, slow queries, disk spill, distribution/sort key issues, a Redshift health check or operational review, or Redshift cost or RPU sizing. Requires the awslabs.redshift-mcp-server MCP server to be connected.
13711d agoReviewMountCreate a free account to mount
S3 resiliency, security, and data protection review. Assesses one or many S3 buckets across nine dimensions — versioning, replication, object lock, encryption, block public access, bucket policy, ownership controls, server access logging, and static website hosting — using read-only control-plane API calls, then produces a rated report with prioritized findings and remediation guidance. Single-bucket and multi-bucket (fleet) reviews are routed automatically by input count.
13711d agoReviewMountCreate a free account to mount
Investigate incidents and answer operational questions using Sumo Logic logs, alerts, dashboards and SIEM insights. Use during incident triage and root cause analysis when the customer's telemetry is in Sumo Logic, or when the user asks to search Sumo Logic, check monitors/alerts, review insights, or inspect dashboards.
13711d agoReviewMountCreate a free account to mount
Automatically load this skill when investigating an operational anomaly on a cloud resource - CPU or memory spikes, latency, elevated error rates, unexpected network traffic, crashes, or cost spikes - to determine whether it is a purely operational issue or a security incident, using the affected resource's security context (vulnerabilities, misconfigurations, exposed secrets, data findings, active threats, malware, detections, and toxic combinations).
13711d agoReviewMountCreate a free account to mount
AWS CDK CLI general PR reviewer. Use when reviewing any pull request to aws/aws-cdk-cli — the CLI (packages/aws-cdk), toolkit-lib, cloud-assembly-schema, cdk-assets, cloudformation-diff, integ-runner, or the projen/monorepo config. Precision-first: flags only concrete defects the PR introduces, across compatibility, architecture, error handling, testing, correctness, and PR scope.
11058d agoReviewMountCreate a free account to mount
Prepare a GitLab workitem for implementation — fetch the story, sync main with origin, assess whether the story is actually ready against latest main, then cut a branch with the bundled new_branch.sh. Use when starting work on a new story/issue/workitem ("let's start on 1345", "prep this story", "is this ready to implement", "create a branch for this issue").
8744d agoReviewMountCreate a free account to mount
Query AWS Lambda durable function execution history through the durable-telemetry MCP server — use when investigating workflow failures, execution timing, or step-level errors across DynamoDB, Athena/S3, Aurora, Redshift, OpenSearch, or CloudWatch Logs destinations.
8514d agoReviewMountCreate a free account to mount
Use when migrating Glue Python jobs and connections to SageMaker Unified Studio, including manual selections, discovery results, and partially completed migrations.
Self-contained AI assistant for configuring the AWS Advanced Ruby Driver Wrapper (gem aws_advanced_ruby_driver_wrapper) version 1.0.1+. Walks users through building a working configuration via interview, reviews existing configs, answers arbitrary parameter and plugin questions, and diagnoses problems caused by configuration. Grounded in the wrapper source and the official Ruby docs - no other access required.
Self-contained AI assistant for troubleshooting the AWS Advanced Ruby Driver Wrapper (gem aws_advanced_ruby_driver_wrapper) version 1.0.1+. Diagnoses errors and unexpected behavior - installation and load failures, connection setup errors, IAM, Secrets Manager, AD FS and Okta authentication, failover that doesn't happen or fails, Active Record integration, the trilogy driver, Blue/Green, custom endpoints, Global Database, KMS encryption, telemetry, and performance. Classifies the cause as configuration, environment, wrapper bug, or not the wrapper, isolates it, reads wrapper logs, and drafts an issue report when needed. Grounded in the wrapper source and the official Ruby docs - no other access required.
A folder with a SKILL.md file: a name, a description of when to use it, and instructions. Claude loads a skill only when the task matches its description.
How do I use one I find here?
Copy the folder into your project's .claude/skills/ directory, or into your own skills folder to use it everywhere.
What do the warnings mean?
We read each file for commands that read secrets, delete things or pipe downloads into a shell, and say so before you copy it. No warning is not a promise that a file is safe.
Which skills worked for people?
Open a skill to see its discussion. Reports from people and their agents are coming.
AWSSkill