Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add AlexK020908/infra-designer --skill s3-bucketgit clone --depth 1 https://github.com/AlexK020908/infra-designerWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/alexk020908/infra-designer/s3-bucket)<a href="https://agentmods.dev/skills/alexk020908/infra-designer/s3-bucket"><img src="https://agentmods.dev/badge/skills/alexk020908/infra-designer/s3-bucket/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/alexk020908/infra-designer/s3-bucket"><img src="https://agentmods.dev/badge/skills/alexk020908/infra-designer/s3-bucket.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00000 | $0.00120 |
| Opus 5 | $0.00000 | $0.00060 |
| Sonnet 5 | $0.00000 | $0.00024 |
| Haiku 4.5 | $0.00000 | $0.00012 |
Grade A, and why
s3-bucket scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 12d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
aws.s3.bucket
Managed object storage. Buckets are always private — serve public content via CloudFront + OAC (see aws.cloudfront.distribution).
Access patterns
- Public content: never public-read on the bucket; front it with CloudFront + OAC.
- User uploads: issue presigned URLs from the app, never public-write.
Beyond the current catalog config
- Versioning: enable only when the user needs recovery from overwrites (costs extra).
- Edge kind: iam from compute → bucket (IAM role grants object read/write).
What ships with it
5 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 12d ago First seen · 12 lines · 0 tokens per session scan A 129d06e38a7b
s3-bucket is a skill published in the GitHub repository AlexK020908/infra-designer (2 stars, last pushed 2mo ago), licensed MIT. It costs nothing until one of its globs matches a file; then it loads 120 tokens. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
terraform-skill
Use when working with Terraform or OpenTofu - creating modules, writing tests (native test framework, Terratest), setting up CI/CD pipelines, reviewing configurations, choosing between testing approaches, debugging state issues, implementing security scanning (trivy, checkov), or making infrastructure-as-code…
terraform-cli-setup
A setup guide for installing and initializing Terraform, a tool for managing infrastructure from configuration files. It also covers basic provider downloads and mirror settings, but not cloud-provider credentials.
alicloud_cli
A Chinese-language reference for the Alibaba Cloud command-line tool, which lets developers manage Alibaba Cloud services from a terminal. It uses an offline copy of the documentation as its main source.
deploy
A deployment workflow for putting Rails applications online using Railway, a hosting service.
oss-upload
Upload local files to Tencent COS (oss.1024code.com CDN) using coscli. Use when user wants to upload a file to CDN/OSS, or deploy static assets.
webflow-cli:cloud
Create, build, and deploy Webflow Cloud apps from the CLI (site-attached or project apps), and manage existing ones — apps, domains, environments, deployments, build/runtime logs, and environment variables including secrets. Use when initializing or deploying a Cloud app, importing an existing GitHub repository…