ops-cloud-deployment-create SKILL.md skillA

ops-cloud-deployment-create from baristaze/swe_guidelines is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.

Install it, pinned
mdr add baristaze/swe_guidelines/ops-cloud-deployment-create@git:20261014.62aa70e

Pins git:20261014.62aa70e in mdr.lock. Pin the fingerprint instead.

Audit grade
A, 17 of 17 checks passed
Kind
SKILL.md skill
Repository
baristaze/swe_guidelines
Path
scaffold/acme_root/.agents/skills/ops-cloud-deployment-create/SKILL.md
Versions recorded
8
Latest version
git:20261014.62aa70e, committed Oct 14, 2026
First version recorded
Sep 29, 2026
Size
16,859 bytes
Repository stars
94
License
MIT

Create one cloud environment of the system from nothing, in its own AWS account, as that account's administrator: the bootstrap root (state bucket, registry, OIDC trust, the deploy roles, the investigate role, the budget, the zones), the delegation of its public names at Cloudflare, the investigate profile, the GitHub environments and their variables, then the first deploy through the pipeline and the grants that follow it. Runs scripts/cloud_create.sh after checking the administrator profile…

Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.

What the file says

# ops-cloud-deployment-create

The bootstrap. Everything the pipeline needs before its first run is
made here, once per account, by a person holding the account's
administrator profile with an agent narrating. After this skill the
environment moves only by pull request, and the administrator's
permission set goes back to the organization.

Read `../_shared/ops-preamble.md`, a path from this skill's folder,
before the first step: the profiles, the account check, and the env
file are there.

## Input

`--env staging|production [--dry-run]`

`--env` is required; ask for it when missing. `--dry-run` runs the
script in its dry mode, which prints every command it would run and
runs none, so the whole path is readable before the first resource
exists. With `--dry-run` the skill runs the dry mode only and stops;
the real run is a second invocation without the flag. The script creates a cloud environment only; the compose stack
is `make up`, not this skill.

The accounts themselves, Identity Center, the permission sets, the
local profiles, and the Cloudflare token are made by hand, once, as
`deployment/cloud/first_time_manual.md` says. When a profile the skill
…

Read the whole file at its exact version.

How to install

The exact contents, by fingerprint
mdr add baristaze/swe_guidelines/ops-cloud-deployment-create@sha256:b39af720ea50f087

The line at the top of this page pins the label git:20261014.62aa70e, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.

Badge

mdr badge

[![mdr](https://markdownregistry.com/badge/art_qi42xknzodzcuqwj.svg)](https://markdownregistry.com/a/art_qi42xknzodzcuqwj)

1 badge image fetches in 30 days. What the badge shows.

Versions

The registry has recorded 8 versions of this file, between Sep 29, 2026 and Oct 14, 2026, about one every 2 days.

versioncommittedcommitsizeaudit
git:20261014.62aa70e latest2026-10-14 62aa70e 16,859 BA view · diff
git:20261004.91705062026-10-04 9170506 16,863 BA view · diff
git:20261003.e4b535f2026-10-03 e4b535f 16,708 BA view · diff
git:20261003.02116382026-10-03 0211638 15,626 BA view · diff
git:20261003.9874a5f2026-10-03 9874a5f 15,558 BA view · diff
git:20260930.97478f92026-09-30 97478f9 15,254 BA view · diff
git:20260929.07135682026-09-29 0713568 15,159 BA view · diff
git:20260929.34220142026-09-29 3422014 14,937 BA view

Audit of the latest version

A  17 of 17 checks passed. Fixed automatic checks with no AI involved, so the same checks give the same answer every run.
  • pass: Frontmatter block present
  • pass: Frontmatter declares a name
  • pass: Frontmatter declares a description
  • pass: Size between 200 bytes and 200 KB (16859 bytes)
  • pass: No zero-width or bidi control characters
  • pass: No instruction hidden inside an HTML comment
  • pass: No link to an exfiltration or paste host
  • pass: No credential-shaped string
  • pass: No instruction to send local credentials anywhere
  • pass: No text hidden with inline styles
  • pass: No prompt-injection phrasing
  • pass: No curl or wget piped into a shell
  • pass: No recursive delete of root, home or parent
  • pass: No instruction to read or print local credentials
  • pass: No base64 blob over 200 characters
  • pass: No link to a raw IP address
  • pass: No script tag

Source

GitHub

baristaze/swe_guidelines · 94 stars · license MIT · pushed 2026-11-02 · branch main

API

GET https://markdownregistry.com/api/v1/artifacts/art_qi42xknzodzcuqwj
GET https://markdownregistry.com/api/v1/resolve?ref=baristaze/swe_guidelines/ops-cloud-deployment-create
GET https://markdownregistry.com/api/v1/blob/b39af720ea50f0875b3e18455f3f3d6a029b3c1f3c1f6a2da33f6a0b53191df0

Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.

Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.

More from baristaze/swe_guidelines

CLAUDE.md@.claude CLAUDE.md file
baristaze/swe_guidelines · .claude/CLAUDE.md
git:20261004.1522cbc · audit B · 94 stars
AGENTS.md AGENTS.md file
baristaze/swe_guidelines · AGENTS.md
git:20261022.3569cc8 · audit A · 94 stars
audit-credential-lifetimes SKILL.md skill
baristaze/swe_guidelines · scaffold/acme_root/.agents/skills/audit-credential-lifetimes/SKILL.md · Audit how long each credential keeps working after it should stop: one row per credential kind (auth session, API key…
git:20261014.62aa70e · audit B · 94 stars
audit-database-calls SKILL.md skill
baristaze/swe_guidelines · scaffold/acme_root/.agents/skills/audit-database-calls/SKILL.md · Audit how many database calls each endpoint and each worker flow makes, at its least and at its most: round trips…
git:20261014.7748a1f · audit B · 94 stars
audit-deploy-time SKILL.md skill
baristaze/swe_guidelines · scaffold/acme_root/.agents/skills/audit-deploy-time/SKILL.md · Audit where a deploy's minutes go: the pipeline's jobs and steps from the Actions run, the Terraform apply's resources…
git:20260929.3422014 · audit A · 94 stars
audit-provider-calls SKILL.md skill
baristaze/swe_guidelines · scaffold/acme_root/.agents/skills/audit-provider-calls/SKILL.md · Audit every call to an external provider (WorkOS, the AWS services, any HTTP to a third party), per flow: each route…
git:20261014.7748a1f · audit A · 94 stars
audit-query-indexes SKILL.md skill
baristaze/swe_guidelines · scaffold/acme_root/.agents/skills/audit-query-indexes/SKILL.md · Audit whether the indexes fit the queries, and what breaks first under load: every statement the Postgres storage…
git:20261014.62aa70e · audit A · 94 stars
audit-retention SKILL.md skill
baristaze/swe_guidelines · scaffold/acme_root/.agents/skills/audit-retention/SKILL.md · Audit which stores grow without bound and what trims them: every table of every role, with what writes it, when a row…
git:20261014.62aa70e · audit A · 94 stars
docs-compact SKILL.md skill
baristaze/swe_guidelines · scaffold/acme_root/.agents/skills/docs-compact/SKILL.md · Compact the tree's documents to what holds at the head of the main branch: rewrite each ADR to its present decision…
git:20261015.a329574 · audit A · 94 stars
ops-cloud-deployment-nuke SKILL.md skill
baristaze/swe_guidelines · scaffold/acme_root/.agents/skills/ops-cloud-deployment-nuke/SKILL.md · Destroy one cloud environment of the system as its account's administrator: empty the buckets, destroy the environment…
git:20261014.62aa70e · audit A · 94 stars
ops-infra-as-code SKILL.md skill
baristaze/swe_guidelines · scaffold/acme_root/.agents/skills/ops-infra-as-code/SKILL.md · Write or change the system's Terraform in the shape the guideline prescribes: one module graph shared by every…
git:20261014.62aa70e · audit A · 94 stars
ops-integration-silent SKILL.md skill
baristaze/swe_guidelines · scaffold/acme_root/.agents/skills/ops-integration-silent/SKILL.md · Say why an integration went silent, in one environment, with a read-only credential: count what its inbound webhook…
git:20261009.923b66c · audit B · 94 stars

Every file in baristaze/swe_guidelines

Browse by kind, by grade A, or by owner.