Getting it into your agent
It runs from inside its repository, so the clone comes first — what it calls does not travel with the file alone.
git clone --depth 1 https://github.com/yaalalabs/agent-kernelnpx agentmods add skills/yaalalabs/agent-kernel/ak-cloud-deployWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/yaalalabs/agent-kernel/ak-cloud-deploy)<a href="https://agentmods.dev/skills/yaalalabs/agent-kernel/ak-cloud-deploy"><img src="https://agentmods.dev/badge/skills/yaalalabs/agent-kernel/ak-cloud-deploy/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/yaalalabs/agent-kernel/ak-cloud-deploy"><img src="https://agentmods.dev/badge/skills/yaalalabs/agent-kernel/ak-cloud-deploy.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 3 findings, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium Prompt Injection · line 364 Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.Fix: Remove the large whitespace padding (blank-line blocks or long space runs) and review any content hidden below or to the right of it. Keep skill files compact and reviewable so no instructions can be
- medium Prompt Injection · line 366 Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.Fix: Remove the large whitespace padding (blank-line blocks or long space runs) and review any content hidden below or to the right of it. Keep skill files compact and reviewable so no instructions can be
- medium Data Exfiltration · line 1321 Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.Fix: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00157 | $0.13875 |
| Opus 5.5 | $0.00063 | $0.05550 |
| Sonnet 5.5 | $0.00031 | $0.02775 |
| Haiku 4.5 | $0.00016 | $0.01388 |
Grade A, and why
ak-cloud-deploy scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 7d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
curl -s -X POST http://localhost:8000/api/v1/chat \ How it starts
The opening of the file, as written. The whole thing — 1,506 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Deploy to Cloud
Use this skill to deploy your Agent Kernel project to AWS, Azure, or GCP.
Instructions for the Agent
When the user wants cloud deployment, follow this workflow.
Step 1: Identify the Project
Check for:
pyproject.tomlwithagentkerneldependency- agent entry file (
app.py,lambda.py, or similar) config.yaml
If missing, suggest ak-init first.
Step 2: Ask Deployment Questions
- Target platform: AWS, Azure, GCP, or Kubernetes (on-prem / baremetal / EKS via the Helm chart; see the On-Prem / Kubernetes section)?
- Runtime mode:
- Serverless
- Containerized
- Execution pattern (AWS only):
- Synchronous HTTP (
rest_sync, supports standard or queue/scalable mode; AWS serverless or containerized) - Asynchronous REST (
rest_async, queue/scalable mode; AWS serverless or containerized) - WebSocket full-response (
async, works with or without queue mode —queue_mode = falseruns the agent inline,queue_mode = trueenqueues to a separately-scalable Agent Runner) — AWS serverless or AWS containerized/ECS - WebSocket token streaming (
stream, works with or without queue mode, same asasyncabove) — AWS serverless or AWS containerized/ECS; also available via SSE (POST /api/v1/chatwithexecution.mode: stream, no Terraform changes required) wherever the built-in FastAPI REST server runs: local/self-hosted, AWS ECS single-container REST, Azure Container Apps, GCP Cloud Run — not on AWS Lambda or Azure Functions, which use WebSocket instead
- Scalability (AWS serverless only): standard or queue/scalable mode?
- Session store: Redis, Valkey (AWS only), DynamoDB (AWS), Cosmos DB (Azure), Firestore (GCP)?
- Security: custom authorizer required (AWS serverless only)?
- Resource naming: a single
prefixapplied to every resource name (e.g.myapp-dev-chat).
Step 3: Choose the Correct Terraform Module
Use official modules:
- AWS serverless:
yaalalabs/ak-serverless/aws - AWS containerized:
yaalalabs/ak-containerized/aws - Azure serverless:
yaalalabs/ak-serverless/azurerm - Azure containerized:
yaalalabs/ak-containerized/azurerm - GCP serverless:
yaalalabs/ak-serverless/google - GCP containerized:
yaalalabs/ak-containerized/google
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 7d ago Changed 1632b944db15
- 8d ago Changed · +75 lines e8a72364634c
- 17d ago Changed · +44 lines · +11 tokens per session 2d336de61477
- 21d ago Changed 5836c0e1b342
- 24d ago Changed 62998b7c3624
- 25d ago Changed · -36 lines 2586e4f86c54
- 29d ago Changed · +4 lines e8d140bc5852
- 1mo ago Changed 53c67eafa83c
- 1mo ago Changed · +6 lines 57ee344b1804
- 1mo ago First seen · 1,413 lines · 146 tokens per session scan A d063f6a9f8e6
ak-cloud-deploy is a skill published in the GitHub repository yaalalabs/agent-kernel (192 stars, last pushed yesterday), licensed Apache-2.0. It adds 157 tokens to every session and 13,875 once invoked, about $0.0006 per session on Opus 5.5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
cloud-run
Deploy and manage containerized workloads on Cloud Run. Covers service creation, traffic splitting, IAM, VPC connectivity, secrets integration, auto-scaling, and gcloud CLI patterns. Warns before billable deployments. Use when the user mentions: deploy to cloud run, create cloud run service, serverless container…
gke
Deploy and manage Kubernetes workloads on Google Kubernetes Engine (GKE). Covers Autopilot and Standard modes, Workload Identity, node pool management, networking, security, and gcloud/kubectl CLI patterns. Warns before cluster creation (billable). Use when the user mentions: kubernetes on GCP, create GKE cluster, GKE…
aws-cli
CLI-first AWS orchestration skill for Lambda, ECS/Fargate, and S3 workflows rooted in .☁️ runbooks.
azure-prepare
Prepare azd-based Azure projects for deployment: generates azure.yaml, infrastructure (Bicep/Terraform), and Dockerfiles for the Azure Developer CLI (azd) workflow. USE ONLY when the user explicitly wants to use azd as the deployment tool, or the project already has an azure.yaml file. DO NOT USE FOR: non-azd…
azure-cloud-migrate
Assess and migrate cross-cloud workloads to Azure with reports and code conversion. Supports Lambda→Functions, Beanstalk/Heroku/App Engine→App Service, Fargate/Kubernetes/Cloud Run/Spring Boot→Container Apps. WHEN: migrate Lambda to Functions, AWS to Azure, migrate Beanstalk, migrate Heroku, migrate App Engine, Cloud…
ecs
AWS ECS container orchestration for running Docker containers. Use when deploying containerized applications, configuring task definitions, setting up services, managing clusters, or troubleshooting container issues.