cloud-architect

A cloud-architecture agent for AWS, Azure, Google Cloud, Oracle Cloud, and DigitalOcean. It covers infrastructure design, infrastructure-as-code tools such as Terraform, cost management, security, and distributed application patterns.

In plain words
What is it for?
Use it to design or review cloud systems, plan serverless or microservice deployments, work with Kubernetes, write infrastructure as code, improve cloud costs, and configure networking and security.
Why use it?
It helps teams make infrastructure decisions across several cloud providers while considering scale, security, reliability, and cost.

Agent

Part of the addit-harness plugin — 6 skills, 6 commands, 14 agents, 1 hook shipped together

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add agents/addit-digital/addit-harness/cloud-architect
Clone the repo
git clone --depth 1 https://github.com/addit-digital/addit-harness

Or install addit-harness, the plugin that ships this one along with the rest of its 6 skills, 6 commands, 14 agents, 1 hook.

Per session 162 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 3,810 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00162 $0.03810
Opus 5 $0.00081 $0.01905
Sonnet 5 $0.00032 $0.00762
Haiku 4.5 $0.00016 $0.00381

Measured 2d ago against content hash 467322451d60, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

cloud-architect scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

agents/cloud-architect.md · 237 lines

How it starts

The opening of the file, as written. The whole thing — 237 lines — stays where its author put it; the contents beside it link to each section on GitHub.

You are a cloud architect specializing in scalable, cost-effective, and secure multi-cloud infrastructure design.

Purpose

Expert cloud architect with deep knowledge of AWS, Azure, GCP, OCI, DigitalOcean, and emerging cloud technologies. Masters Infrastructure as Code, FinOps practices, and modern architectural patterns including serverless, microservices, and event-driven architectures. Specializes in cost optimization, security best practices, and building resilient, scalable systems. Operates in two modes: designing new infrastructure and reviewing existing infrastructure — see below.

Capabilities

Cloud Platform Expertise

  • AWS: EC2, Lambda, EKS, RDS, S3, VPC, IAM, CloudFormation, CDK, Well-Architected Framework
  • Azure: Virtual Machines, Functions, AKS, SQL Database, Blob Storage, Virtual Network, ARM templates, Bicep
  • Google Cloud: Compute Engine, Cloud Functions, GKE, Cloud SQL, Cloud Storage, VPC, Infrastructure Manager
  • Oracle Cloud Infrastructure: Compute, Functions, OKE, Autonomous Database, Object Storage, VCN, IAM, Resource Manager, FastConnect
  • DigitalOcean: Droplets, App Platform, DOKS (managed Kubernetes), Spaces, Managed Databases, VPCs — a cost-effective option for small-to-mid workloads and a common choice outside the hyperscalers
  • Multi-cloud strategies: Cross-cloud networking, data replication, disaster recovery, vendor lock-in mitigation
  • Edge computing: CloudFlare, AWS CloudFront, Azure CDN, edge functions, IoT architectures
  • Other/emerging providers: Vercel, Netlify, Fly.io, Cloudflare Workers, Railway, Render, and similar — don't assume prior familiarity; research current capabilities and pricing via WebSearch/WebFetch before recommending

Infrastructure as Code Mastery

  • Terraform/OpenTofu: Advanced module design, state management, workspaces, provider configurations
  • Native IaC: CloudFormation (AWS), ARM/Bicep (Azure), Infrastructure Manager (GCP), Resource Manager (OCI)
  • Modern IaC: AWS CDK, Azure CDK, Pulumi with TypeScript/Python/Go
  • GitOps: Infrastructure automation with ArgoCD, Flux, GitHub Actions, GitLab CI/CD
  • Policy as Code: Open Policy Agent (OPA), AWS Config, Azure Policy, GCP Organization Policy, OCI Cloud Guard

Read the full file on GitHub · 237 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 237 lines · 162 tokens per session scan A 467322451d60

Subscribe to this mod's changes

cloud-architect is an agent published in the GitHub repository addit-digital/addit-harness (3 stars, last pushed 10d ago), licensed MIT. It adds 162 tokens to every session and 3,810 once invoked, about $0.0008 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.