Agent skill · software engineering · sickn33
hf-cloud-aws-context-discovery
Discover the effective local AWS profile, region, account, and caller identity before any AWS task without exposing credentials.
Why this skill is useful
Adds specific AWS CLI commands and context discovery patterns that the AI wouldn't reliably generate on its own.
What it needs
Requires aws-cli installed locally. Requires aws account access. About 3k tokens when loaded. Last updated 2026-08-07. 44,571 stars on the source repository.
What this skill does
AWS Context Discovery Before doing any AWS work, inspect only masked AWS CLI metadata. Don't guess the region, and don't ask the user for things the CLI already answers. Never open or print ~/.aws/credentials, credential-process output, secret environment variables, access keys, session tokens, or SSO token caches. When to Use Establish the effective AWS profile, region, account, and caller before AWS work. Diagnose expired SSO sessions, missing profiles, or configuration overrides. Provide verified context to later SageMaker planning and deployment skills. What to discover Run these at the start of the AWS work and remember the results for the rest of the session. 1. Active profile Use a profile the user explicitly named, otherwise use the profile identified by masked AWS CLI metadata. If the named profile is absent from aws configure list-profiles, surface that clearly. 2. Region Resolution order — stop at the first one that produces a value: 1. Region the user explicitly named in this conversation 2. Region reported by aws configure list --profile "$profile" 3. Region reported by aws configure get region --profile "$profile" 5. Ask the user — but only after the first four have failed Do not fall back to us-east-1 or any other hardcoded default. 3. Credentials, account ID, caller ARN Three purposes in one call: confirms credentials are valid (stop if not), returns the Account ID (needed for ARN construction), returns the Arn of the caller. 4. Identify SSO / assumed-role principals The Arn field tells you what kind of principal this is. The pattern matters because it determines what IAM operations the caller can do. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills sickn33/hf-cloud-aws-context-discovery--490bf1