Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/aws-samples/sample-strands-agent-with-agentcore/workspacenpx skills add aws-samples/sample-strands-agent-with-agentcore --skill workspacegit clone --depth 1 https://github.com/aws-samples/sample-strands-agent-with-agentcoreWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/aws-samples/sample-strands-agent-with-agentcore/workspace)<a href="https://agentmods.dev/skills/aws-samples/sample-strands-agent-with-agentcore/workspace"><img src="https://agentmods.dev/badge/skills/aws-samples/sample-strands-agent-with-agentcore/workspace.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00041 | $0.00672 |
| Opus 5 | $0.00020 | $0.00336 |
| Sonnet 5 | $0.00008 | $0.00134 |
| Haiku 4.5 | $0.00004 | $0.00067 |
Grade A, and why
workspace scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 71 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Workspace
Provides unified read/write access to all files in the current session. The userId and sessionId are injected automatically — you only specify the logical path.
Path Conventions
| Prefix | What it accesses |
|---|---|
uploads/<file> |
Files uploaded by the user |
code-agent/<file> |
Files created by the code agent (auto-synced) |
code-interpreter/<file> |
Files created in the Code Interpreter workspace |
documents/powerpoint/<file> |
PowerPoint presentations |
documents/word/<file> |
Word documents |
documents/excel/<file> |
Excel spreadsheets |
documents/image/<file> |
Images from other tools |
Note: Files written under
/mnt/workspacepersist for the chat session, and user uploads are available under/mnt/workspace/inputs. Code Agent downloads session uploads into its own working directory when delegated.
Usage
See everything in the session:
workspace_list()
workspace_list("uploads/")
workspace_list("code-agent/")
Read a file the code agent created:
workspace_read("uploads/data.jsonl") # uploaded structured data
workspace_read("code-agent/calculator.png") # binary → base64
workspace_read("code-agent/report.md") # text → string
Pass a file from one skill to another:
result = workspace_read("documents/excel/data.xlsx") # encoding: base64
workspace_write("code-agent/data.xlsx", result["content"], encoding="base64")
Notes
- Text files return
encoding: "text"with plain string content. Large text reads are bounded; whentruncatedis true, use Code Interpreter for the complete file instead of repeatedly reading it into model context. Code Interpreter uses/mnt/workspace/inputs/<file>. - JSON, JSONL, and NDJSON uploads are text files; large chat attachments may
be truncated in model context, but the complete file remains under
uploads/ - Binary files (images, Office docs, PDF, etc.) return
encoding: "base64" workspace_writeaccepts both encodings — use"base64"for binary- Files written here are immediately available to all other skills in the session
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 4d ago First seen · 71 lines · 41 tokens per session scan A 791784d56ac8
workspace is a skill published in the GitHub repository aws-samples/sample-strands-agent-with-agentcore (192 stars, last pushed today), licensed MIT. It adds 41 tokens to every session and 672 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
draw-image
Generate an image from a text prompt using an OpenAI-compatible image generation API (gpt-image-1-mini or compatible). The image is uploaded to the gofile.io public file sharing service and ONLY the public download page URL is returned. Trigger when user asks to draw, paint, generate, or create an image.
A2A JSON-RPC Call
Call a peer agent's A2A JSON-RPC endpoint. Supports tasks/send (send a task message) and tasks/get (query task status).
Fetch Agent Card
Fetch an A2A agent card JSON from a given endpoint URL. Tries direct GET first, then falls back to /.well-known/agent.json.
Echo Skill Sample
Echo input parameters as JSON.
health-event-impact-assessment
Evaluates AWS Health event impact on application workloads using topology knowledge. Determines blast radius, affected teams, and notification routing. Use this skill when investigating incidents triggered by AWS Health events including scheduled maintenance, operational issues, and service degradation notifications.
a2a-endpoint-validation
Validate an A2A endpoint, Agent Card, health route, and protocol behavior before using it in an agent workflow.