pulumi-migrate-from-discovered-stack SKILL.md skillA
pulumi-migrate-from-discovered-stack from pulumi/agent-skills is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add pulumi/agent-skills/pulumi-migrate-from-discovered-stack@git:20260803.4be16bfPins git:20260803.4be16bf in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- pulumi/agent-skills
- Path
migration/skills/pulumi-migrate-from-discovered-stack/SKILL.md- Versions recorded
- 2
- Latest version
- git:20260803.4be16bf, committed Aug 3, 2026
- First version recorded
- Aug 3, 2026
- Size
- 23,680 bytes
- Repository stars
- 78
- License
- Apache-2.0
Migrate a CloudFormation or ARM stack into a Pulumi stack, sourced from a stack that Pulumi Cloud's Discovery feature has already found and exposed via the discovered-stacks API. Load this skill when the user has a discovered stack in Pulumi Cloud and wants to bring its resources under Pulumi management. Do NOT load for greenfield Pulumi authoring, raw template conversion with no discovered-stack counterpart (i.e. no matching entry from the discovered-stacks API), or Terraform migration.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
**Scope: this skill only applies to stacks Pulumi Cloud's Discovery feature has already scanned and exposed through the discovered-stacks API** (`GET .../discovered-stacks/{projectName}/{stackName}/resources`, see below). It is not for migrating an arbitrary CloudFormation/ARM template or account that Discovery hasn't scanned yet — if no discovered stack exists for the source, this skill has nothing to read and does not apply.
> **Do not load `cloudformation-to-pulumi` or `pulumi-arm-to-pulumi` alongside this skill.** Those two skills prescribe a template-first workflow (mechanical translation → import) and mandate `aws-native` for AWS. This skill is cloud-state-first (import from discovered state → optional refactor against the template later) and defaults to `aws` classic / `azure-native`. The useful reference material from those two skills has been curated into [`cloudformation.md`](cloudformation.md) and [`arm.md`](arm.md) in this folder.
---
## Plan adjustment
…Read the whole file at its exact version.
How to install
mdr add pulumi/agent-skills/pulumi-migrate-from-discovered-stack@sha256:b2178a963701fdefThe line at the top of this page pins the label git:20260803.4be16bf, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_kxczbekefmszvngk)
3 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 2 versions of this file, all committed on Aug 3, 2026.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20260803.4be16bf latest | 2026-08-03 | 4be16bf | 23,680 B | A | view · diff |
| git:20260803.0ac67d4 | 2026-08-03 | 0ac67d4 | 22,899 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (23680 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
pulumi/agent-skills · 78 stars · license Apache-2.0 · pushed 2026-11-03 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_kxczbekefmszvngk GET https://markdownregistry.com/api/v1/resolve?ref=pulumi/agent-skills/pulumi-migrate-from-discovered-stack GET https://markdownregistry.com/api/v1/blob/b2178a963701fdef7271e577800f474699d15a7dad1b4b6b62097d97a95d5512
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.