Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add anyshift-io/sre-skills --skill sqs-queue-auditorgit clone --depth 1 https://github.com/anyshift-io/sre-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/anyshift-io/sre-skills/sqs-queue-auditor)<a href="https://agentmods.dev/skills/anyshift-io/sre-skills/sqs-queue-auditor"><img src="https://agentmods.dev/badge/skills/anyshift-io/sre-skills/sqs-queue-auditor/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/anyshift-io/sre-skills/sqs-queue-auditor"><img src="https://agentmods.dev/badge/skills/anyshift-io/sre-skills/sqs-queue-auditor.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00196 | $0.03124 |
| Opus 5 | $0.00098 | $0.01562 |
| Sonnet 5 | $0.00039 | $0.00625 |
| Haiku 4.5 | $0.00020 | $0.00312 |
Grade A, and why
sqs-queue-auditor scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 10d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 140 lines — stays where its author put it; the contents beside it link to each section on GitHub.
sqs-queue-auditor
Configuration-audit skill for a single AWS SQS queue. Takes the GetQueueAttributes output for one queue, applies the judgment a senior engineer applies to that one source (the thresholds, the known-bad combinations, the one arithmetic relationship that turns a correct-looking config into silent message loss), and returns a ranked list of findings with recommendations. Then it names exactly where a single queue's configuration stops being able to answer the question.
When to invoke
- An agent is asked to review, harden, or sanity-check an SQS queue before or after it ships.
- Messages are going missing or being processed twice and nobody can see why from the console.
- A dead-letter queue is configured but empty during an incident, and the question is whether it is actually wired to catch what is failing.
- A queue is being added to a Terraform module or a CDK stack and the config should be checked against the known-bad combinations before apply.
What this skill reads, and what it does not
It reads the static configuration of one queue, plus the attributes of the dead-letter queue that queue's own RedrivePolicy points at. Both are SQS control-plane reads (GetQueueAttributes). That is the entire input. The audit is correct and complete for what a queue's configuration can tell you, and it is explicit about the rest:
- It does not read CloudWatch. Live behaviour (redrive volume, age of the oldest message, in-flight count, empty-receive rate) is a time-series, not an attribute.
- It does not read the consumers. Whether the visibility timeout is actually long enough is a property of how long the consumer takes, which is not in the queue.
- It does not read account IAM. The effective set of principals that can act on the queue is the union of the resource policy (visible) and every identity policy in the account (not visible here).
- It does not read the producers. Whether the right services are writing to the queue, and whether anyone is draining the DLQ, needs the inventory on either side.
What ships with it
42 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- examples/01-no-dlq.md 2.9 KB
- examples/02-dlq-retention-shorter-than-source.md 3.3 KB
- examples/03-maxreceivecount-too-low.md 2.8 KB
- examples/04-poison-ages-out-before-dlq.md 3.9 KB
- examples/05-default-visibility-short-retention.md 3.2 KB
- examples/06-public-queue-policy.md 3.6 KB
- examples/07-fifo-dedup-off.md 2.8 KB
- examples/08-clean-standard.md 2.6 KB
- FAILURE_MODES.md 6.6 KB
- fixtures/01-no-dlq/queue.json 564 B
- fixtures/02-dlq-retention-shorter-than-source/dlq.json 649 B
- fixtures/02-dlq-retention-shorter-than-source/queue.json 632 B
- fixtures/03-maxreceivecount-too-low/dlq.json 659 B
- fixtures/03-maxreceivecount-too-low/queue.json 637 B
- fixtures/04-poison-ages-out-before-dlq/dlq.json 663 B
- fixtures/04-poison-ages-out-before-dlq/queue.json 648 B
- fixtures/05-default-visibility-short-retention/dlq.json 650 B
- fixtures/05-default-visibility-short-retention/queue.json 631 B
- fixtures/06-public-queue-policy/dlq.json 663 B
- fixtures/06-public-queue-policy/queue.json 908 B
- fixtures/07-fifo-dedup-off/dlq.json 748 B
- fixtures/07-fifo-dedup-off/queue.json 804 B
- fixtures/08-clean-standard/dlq.json 672 B
- fixtures/08-clean-standard/queue.json 1.0 KB
- README.md 4.9 KB
- tests/_audit.py 22 KB runs code
- tests/_replay.py 720 B runs code
- tests/eval/eval_results.json 220 KB
- tests/eval/judge_prompt.md 1.4 KB
- tests/eval/queues.py 7.6 KB runs code
- tests/eval/README.md 8.4 KB
- tests/eval/rubric.md 2.6 KB
- tests/eval/run_eval.py 12 KB runs code
- tests/README.md 4.2 KB
- tests/replay_01_no_dlq.py 1.5 KB runs code
- tests/replay_02_dlq_retention.py 1.5 KB runs code
- tests/replay_03_maxreceivecount.py 1.3 KB runs code
- tests/replay_04_poison_ages_out.py 1.6 KB runs code
- tests/replay_05_default_visibility.py 1.8 KB runs code
- tests/replay_06_public_policy.py 1.4 KB runs code
- tests/replay_07_fifo_dedup_off.py 1.4 KB runs code
- tests/replay_08_clean_standard.py 1.6 KB runs code
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 10d ago First seen · 140 lines · 0 tokens per session scan A 7e7c81c83f9b
sqs-queue-auditor is a skill published in the GitHub repository anyshift-io/sre-skills (17 stars, last pushed 13d ago), licensed Apache-2.0. It adds 196 tokens to every session and 3,124 once invoked, about $0.0010 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
legal-issue-research
A systematic research assistant for Chinese law. It searches laws, regulations, judicial interpretations, guiding cases, and typical cases, then organizes the legal sources and how they relate.
multi-jurisdictional-research-zacharie-laik
Conducts multi-jurisdictional legal research and risk assessment across 50+ countries using the Legal Data Hunter MCP, producing cited comparative analyses of case law, legislation, and doctrine.
recht-erbe-verfahren
Austrian probate and inheritance procedure — Verlassenschaftsverfahren (AußStrG §§143ff), Erbantrittserklärung, Erbrechtsklage, Pflichtteilsklage, Testamentsanfechtung, EU-ErbVO cross-border estates, Erbschaftsmediation, and procedural templates for inheritance disputes.
yuandian-law-search
A search tool for Chinese legal provisions and court cases using the Yuandian open platform. It archives search results locally for later review.
paper-to-cn-patent
Convert finished research papers, figures, and author notes into Chinese invention patent application drafts. Use when Codex needs to rewrite a paper as a China invention patent, draft claims, abstract, specification sections, and figure descriptions, assess whether the source materials are sufficient for patent…
software-copyright
A guided workflow for preparing Chinese software copyright registration materials from a real software project. It produces drafts such as application details, source-code documents, and a user manual.