Install
$ agentstack add skill-ulises-jeremias-agent-toolkit-aws-well-architected-review ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
AWS Well-Architected Review (WHAT)
Sources (2026-08-12): Framework https://docs.aws.amazon.com/wellarchitected/latest/framework/the-pillars-of-the-framework.html + https://docs.aws.amazon.com/wellarchitected/latest/framework/welcome.html + https://aws.amazon.com/architecture/well-architected/; WAR Tool https://docs.aws.amazon.com/wellarchitected/latest/userguide/getting-started.html; MCP awslabs/mcp https://github.com/awslabs/mcp + https://github.com/aws/mcp-proxy-for-aws GA https://aws.amazon.com/blogs/aws/the-aws-mcp-server-is-now-generally-available/; servers awslabs.core-mcp-server, awslabs.well-architected-security-mcp-server 0.1.3, awslabs.ecs-mcp-server 0.1.17 uvx awslabs.*@latest AWS_PROFILE/AWS_REGION.
> Provider hierarchy: official MCP (awslabs/mcp family, mcp-proxy-for-aws GA) > custom prompts for account-aware ops (live context, auth via AWS_PROFILE/AWS_REGION); prompts (this skill checklist) remain fallback for offline/low-privilege/CI. See docs/cloud/research-384-candidates.md.
When to use
- Designing or reviewing workload on AWS against 6 pillars.
- Running Well-Architected Review (WAR) without console Tool access.
Instructions
- Run checklist per pillar: operational excellence (runbooks, observability), security (IAM, encryption, least privilege), reliability (multi-AZ, backup, retry), performance (right-sizing, caching), cost (graviton, S3 lifecycle), sustainability (right-sizing, serverless).
- Map to
cloud-design-patternswhere relevant (e.g., reliability →Circuit Breaker). - If live account: delegate to
awslabs/mcp(mcp-proxy-for-awsorawslabs.core-mcp-serveruvx) for context; else do NOT paste${AWS_*}secrets — use placeholders${AWS_PROFILE},${AWS_REGION},${AWS_ACCOUNT_ID}. - Record findings as
High/Medium/Lowrisk per pillar and link to lenses/hands-on labs.
Security
- Must not exfiltrate credentials; use
${AWS_*}placeholders; markaws-well-architected-reviewas optional (no vendor lock).
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: ulises-jeremias
- Source: ulises-jeremias/agent-toolkit
- License: MIT
- Homepage: https://ulises-jeremias.github.io/agent-toolkit-archive/
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.