cloud-architect

cloud-architect is an agent for Claude Code from HermeticOrmus/LibreUIUX-Claude-Code. It costs 75 tokens per session (1,533 once invoked), scanned A, a copy of cicd-automation-cloud-architect, MIT.

An agent role for designing cloud infrastructure across AWS, Azure, and Google Cloud. It covers services, security, infrastructure as code, cost management, serverless systems, microservices, networking, and disaster recovery.

In plain words
What is it for?
Use it to plan or review cloud architectures, Terraform or OpenTofu modules, serverless and event-driven systems, multi-cloud setups, security controls, cost reductions, and recovery plans.
Why use it?
It helps choose and connect cloud resources with attention to scale, security, resilience, and cost. Infrastructure as code means describing systems in files so they can be reviewed and recreated consistently.

Agent for Claude Code

Written for Claude Code: shipped in a Claude Code plugin. Also seen: model in frontmatter.

Part of the cicd-automation plugin — 4 skills, 1 command, 5 agents shipped together

Good fit Use it to plan or review cloud architectures, Terraform or OpenTofu modules, serverless and event-driven systems, multi-cloud setups, security controls, cost reductions, and recovery plans.

Compare 6 agents from other repositories ↓
Install with agentmods
npx agentmods add agents/hermeticormus/libreuiux-claude-code/cloud-architect
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Clone the repo
git clone --depth 1 https://github.com/HermeticOrmus/LibreUIUX-Claude-Code

Made for: Claude Code.

Or install cicd-automation, the plugin that ships this one along with the rest of its 4 skills, 1 command, 5 agents.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for cloud-architect

README.md
[![agentmods](https://agentmods.dev/badge/agents/hermeticormus/libreuiux-claude-code/cloud-architect/github.svg)](https://agentmods.dev/agents/hermeticormus/libreuiux-claude-code/cloud-architect)
Your own site
<a href="https://agentmods.dev/agents/hermeticormus/libreuiux-claude-code/cloud-architect"><img src="https://agentmods.dev/badge/agents/hermeticormus/libreuiux-claude-code/cloud-architect/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for cloud-architect

Your own site · 80×15
<a href="https://agentmods.dev/agents/hermeticormus/libreuiux-claude-code/cloud-architect"><img src="https://agentmods.dev/badge/agents/hermeticormus/libreuiux-claude-code/cloud-architect.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 75 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 1,533 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin 92% copy Near-identical to another mod in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00075 $0.01533
Opus 5.5 $0.00030 $0.00613
Sonnet 5.5 $0.00015 $0.00307
Haiku 4.5 $0.00007 $0.00153

Measured 1mo ago against content hash de8936217e05, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

cloud-architect scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

Origin

This is a copy

92% identical to cicd-automation-cloud-architect — 38 lines differ, which has more behind it and is treated as the original. This page carries a canonical link to it rather than competing with it.

plugins/cicd-automation/agents/cloud-architect.md · 113 lines

How it starts

The opening of the file, as written. The whole thing — 113 lines — stays where its author put it; the contents beside it link to each section on GitHub.

You are a cloud architect specializing in scalable, cost-effective, and secure multi-cloud infrastructure design.

Purpose

Expert cloud architect with deep knowledge of AWS, Azure, GCP, and emerging cloud technologies. Masters Infrastructure as Code, FinOps practices, and modern architectural patterns including serverless, microservices, and event-driven architectures. Specializes in cost optimization, security best practices, and building resilient, scalable systems.

Capabilities

Cloud Platform Expertise

  • AWS: EC2, Lambda, EKS, RDS, S3, VPC, IAM, CloudFormation, CDK, Well-Architected Framework
  • Azure: Virtual Machines, Functions, AKS, SQL Database, Blob Storage, Virtual Network, ARM templates, Bicep
  • Google Cloud: Compute Engine, Cloud Functions, GKE, Cloud SQL, Cloud Storage, VPC, Cloud Deployment Manager
  • Multi-cloud strategies: Cross-cloud networking, data replication, disaster recovery, vendor lock-in mitigation
  • Edge computing: CloudFlare, AWS CloudFront, Azure CDN, edge functions, IoT architectures

Infrastructure as Code Mastery

  • Terraform/OpenTofu: Advanced module design, state management, workspaces, provider configurations
  • Native IaC: CloudFormation (AWS), ARM/Bicep (Azure), Cloud Deployment Manager (GCP)
  • Modern IaC: AWS CDK, Azure CDK, Pulumi with TypeScript/Python/Go
  • GitOps: Infrastructure automation with ArgoCD, Flux, GitHub Actions, GitLab CI/CD
  • Policy as Code: Open Policy Agent (OPA), AWS Config, Azure Policy, GCP Organization Policy

Cost Optimization & FinOps

  • Cost monitoring: CloudWatch, Azure Cost Management, GCP Cost Management, third-party tools (CloudHealth, Cloudability)
  • Resource optimization: Right-sizing recommendations, reserved instances, spot instances, committed use discounts
  • Cost allocation: Tagging strategies, chargeback models, showback reporting
  • FinOps practices: Cost anomaly detection, budget alerts, optimization automation
  • Multi-cloud cost analysis: Cross-provider cost comparison, TCO modeling

Read the full file on GitHub · 113 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 1mo ago First seen · 113 lines · 75 tokens per session scan A de8936217e05

Subscribe to this mod's changes

cloud-architect is an agent published in the GitHub repository HermeticOrmus/LibreUIUX-Claude-Code (115 stars, last pushed 15d ago), licensed MIT. It adds 75 tokens to every session and 1,533 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 0 findings. It is 92% identical to cicd-automation-cloud-architect, differing in 38 lines, and is treated as a copy.

Related

Other agents, from other repositories

data-engineer

Build scalable data pipelines, modern data warehouses, and real-time streaming architectures. Implements Apache Spark, dbt, Airflow, and cloud-native data platforms. Use PROACTIVELY for data pipeline design, analytics infrastructure, or modern data stack implementation.

wshobson/agents · 54 tokens

service-mesh-expert

Expert service mesh architect specializing in Istio, Linkerd, and cloud-native networking patterns. Masters traffic management, security policies, observability integration, and multi-cluster mesh configurations. Use PROACTIVELY for service mesh architecture, zero-trust networking, or microservices communication…

wshobson/agents · 63 tokens

cloud-architect

Multi-cloud architecture, cost optimization, serverless vs containers, disaster recovery, and infrastructure design specialist. Use for high-level architecture decisions, cloud migration planning, or cost optimization. Trigger phrases: cloud, AWS, GCP, Azure, serverless, containers, Kubernetes, infrastructure, cost…

travisjneuman/.claude · 69 tokens

vibe-environment-worker

Runs a vibe session's Vercel environment in symphony-alpha for the vibe and handoff orchestrators. Create mode takes the production flag snapshot in PostHog for the person's real account, pushes the vibe/ branch, starts the environment through the repo's request workflow, follows it to the end, and records the app…

closedloop-ai/claude-plugins · 217 tokens

aws-expert

AWS services architecture (Lambda, ECS, S3, RDS, SQS, CloudFront), IaC patterns, and cost optimization specialist.

vibeeval/vibecosystem · 33 tokens

service-mesh-expert

Service mesh architecture specialist for microservice communication.

vibeeval/vibecosystem · 14 tokens