Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add ofershap/mcp-server-s3 --skill s3-managementgit clone --depth 1 https://github.com/ofershap/mcp-server-s3Wrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/ofershap/mcp-server-s3/s3-management)<a href="https://agentmods.dev/skills/ofershap/mcp-server-s3/s3-management"><img src="https://agentmods.dev/badge/skills/ofershap/mcp-server-s3/s3-management.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00054 | $0.00547 |
| Opus 5 | $0.00027 | $0.00273 |
| Sonnet 5 | $0.00011 | $0.00109 |
| Haiku 4.5 | $0.00005 | $0.00055 |
Grade A, and why
s3-management scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 7d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 48 lines — stays where its author put it; the contents beside it link to each section on GitHub.
AWS S3 Management via MCP
Use this skill when you need to manage S3 buckets, browse objects, upload/download files, or generate presigned URLs.
Available Tools
| Tool | What it does |
|---|---|
list_buckets |
List all S3 buckets in the AWS account |
list_objects |
List objects in a bucket with optional prefix filter |
get_object |
Download and read an object's content as text |
put_object |
Upload text content to an S3 object |
delete_object |
Delete an object from a bucket |
presigned_url |
Generate a temporary presigned URL for an object |
bucket_info |
Check if a bucket exists and get basic info |
Workflow
- Start with
list_bucketsto discover available buckets - Use
list_objectswith a prefix to browse directories within a bucket get_objectreads text content; for binary files, usepresigned_urlinsteadpresigned_urlgenerates a temporary shareable link (default 1 hour expiry)
Key Patterns
list_objectsuses prefix-based filtering (S3 doesn't have real directories):prefix: "uploads/2026/"get_objectreturns text content only; it won't work for images, binaries, or large filesput_objecttakes string content; use it for config files, JSON, text, not binary uploadspresigned_urlis the right tool for sharing files or accessing binary content
Error Scenarios
- AccessDenied: IAM policy missing S3 actions for the bucket/key
- NoSuchBucket or NoSuchKey: verify names with
list_buckets/list_objects get_objectgarbled or failed: object may be binary or too large; usepresigned_urlinstead- Region errors: set
AWS_REGIONto the bucket's region
Safety
- Always confirm before
delete_object; S3 deletions are permanent (unless versioning is enabled) - Always confirm before
put_objectto an existing key; it overwrites without warning - Presigned URLs grant temporary access to anyone with the link; warn users about this
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 7d ago First seen · 48 lines · 54 tokens per session scan A 7c99a88b7b33
s3-management is a skill published in the GitHub repository ofershap/mcp-server-s3 (4 stars, last pushed 29d ago), licensed MIT. It adds 54 tokens to every session and 547 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
aws-expert
Expert-level AWS cloud architecture, services, security, cost optimization, and best practices. Use when the user mentions cloud, infrastructure, devops, or serverless, or when the task involves Compute Services, Storage Services, Database Services, or Networking.
stripe-projects
Provision SaaS services + sync creds via Stripe Projects.
istio-traffic-management
Configure Istio traffic management including routing, load balancing, circuit breakers, and canary deployments. Use when implementing service mesh traffic policies, progressive delivery, or resilience patterns.
langbot-deploy
Deploy and configure a LangBot instance — Docker / Docker Compose, Kubernetes, the config.yaml model, the Box sandbox runtime, the plugin runtime, and the global API key. Use when installing, deploying, upgrading, or configuring LangBot in production or self-hosted environments. Triggers on "deploy langbot", "langbot…
performing-cloud-log-forensics-with-athena
Uses AWS Athena to query CloudTrail, VPC Flow Logs, S3 access logs, and ALB logs for forensic investigation. Covers CREATE TABLE DDL with partition projection, forensic SQL queries for detecting unauthorized access, data exfiltration, lateral movement, and privilege escalation. Use when investigating AWS security…
securing-aws-lambda-execution-roles
Securing AWS Lambda execution roles by implementing least-privilege IAM policies, applying permission boundaries, restricting resource-based policies, using IAM Access Analyzer to validate permissions, and enforcing role scoping through SCPs.