Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/nitinjain999/platform-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/commands/nitinjain999/platform-skills/aws-profile)<a href="https://agentmods.dev/commands/nitinjain999/platform-skills/aws-profile"><img src="https://agentmods.dev/badge/commands/nitinjain999/platform-skills/aws-profile/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/commands/nitinjain999/platform-skills/aws-profile"><img src="https://agentmods.dev/badge/commands/nitinjain999/platform-skills/aws-profile.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00044 | $0.03129 |
| Opus 5 | $0.00022 | $0.01564 |
| Sonnet 5 | $0.00009 | $0.00626 |
| Haiku 4.5 | $0.00004 | $0.00313 |
Grade B, and why
aws-profile scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 10d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Reads agent configuration directoriesmediumAgent snooping
.claude/, .codex/, .gemini/ hold keys, settings and other credentials a mod has no legitimate need for.
cloudwatch ~/.claude/settings.json AWS_PROFILE ⚠ 47m (will not auto-refresh on expiry) How it starts
The opening of the file, as written. The whole thing — 304 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Manage AWS profiles for MCP server configurations across VS Code (GitHub Copilot) and Claude Code.
Reference: references/aws-mcp-profiles.md
Interactive Wizard (fires when no mode is provided)
When invoked with no arguments, ask before proceeding:
Q1 — Mode?
What do you need?
1. discover — list all AWS profiles with type, account ID, env tag, and credential TTL
2. status — show which profile each MCP server is using and whether credentials are fresh
3. switch — update MCP config files to use a different profile
4. login — authenticate and refresh credentials for a specific profile
5. org-scan — list all AWS Organization accounts and cross-reference with configured profiles
Enter 1–5 or mode name:
Q2 — Mode-specific follow-up (one question, after mode is selected):
- discover:
Any filters? (e.g. --expired to show only expired, --type sso, --env prod) — or press enter to list all: - switch: Read
~/.aws/configand list available profiles, then ask:Which profile should MCP servers switch to? - login: Read
~/.aws/configand list available profiles, then ask:Which profile needs authentication? - status: no follow-up — proceed directly
- org-scan:
Which management account profile has organizations:ListAccounts permission? (default: current profile):
Then proceed into the relevant mode below.
Mode: discover
Parse ~/.aws/config and output a classified profile table with credential TTL.
aws-profile discover [--type sso|assume-role|granted|static] [--env prod|staging|dev] [--account <id>] [--chain] [--expired]
Output:
Profile Type Account ID Env Tag Permission Set Expires TTL
prod-platform-eu sso 123456789 prod PowerUser 14:32 UTC 47m ✓
staging-assume assume-role 456789123 staging - 13:58 UTC 13m ⚠
dev-sandbox granted 987654321 dev Developer 09:00 UTC EXPIRED ✗
security static 890123456 - - never ⚠ rotate
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 10d ago First seen · 304 lines · 44 tokens per session scan B 9bf5f6664449
aws-profile is a command published in the GitHub repository nitinjain999/platform-skills (41 stars, last pushed today), licensed Apache-2.0. It adds 44 tokens to every session and 3,129 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it B with 1 finding (reads agent configuration directories). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other commands, from other repositories
announce
Draft X/Twitter announcement post (or thread) for the latest plugin release.
ia-verify
Run pre-PR verification chain -- build, types, lint, tests, security scan, diff review.
release
Generate changelog, bump version, and create git tag.
ia-report-bug
Report a bug in the whetstone plugin.
cccs-guidance
CCCS assessment process and certified cloud provider guidance.
environment-switching-local-cloud-ssh
The environment selector at the bottom of Claude Code switches where work executes: local for fast interactive iteration, cloud (Anthropic servers) for routines that must run with your machine off, SSH for driving a remote box like a VPS.