name	aws-scan-resources
description	Enumerate AWS compute, storage, network, and IAM resources and write a structured inventory to AWS_STATE_DIR.
model	sonnet
effort	medium
context	fork

Procedure

ASR-1. Verify: aws CLI, AWS_PROFILE, AWS_STATE_DIR. ASR-2. Enumerate with read-only CLI (pass --profile $AWS_PROFILE --region $AWS_DEFAULT_REGION on every call):

EC2: aws ec2 describe-instances --query 'Reservations[].Instances[].{id:InstanceId,state:State.Name,type:InstanceType}'
ECS: aws ecs list-clusters + aws ecs list-services --cluster <name>
Lambda: aws lambda list-functions --query 'Functions[].{name:FunctionName,runtime:Runtime}'
S3: aws s3api list-buckets --query 'Buckets[].Name'
EBS: aws ec2 describe-volumes --query 'Volumes[].{id:VolumeId,size:Size,state:State}'
RDS: aws rds describe-db-instances --query 'DBInstances[].{id:DBInstanceIdentifier,engine:Engine}'
VPC/SG: aws ec2 describe-vpcs, aws ec2 describe-security-groups
IAM: aws iam list-users, aws iam list-roles, aws iam list-policies --scope Local ASR-3. Write raw data to $AWS_STATE_DIR/resources-<YYYYMMDD>.json. Single-region scope. ASR-4. Write human-readable summary to $AWS_STATE_DIR/resources-<YYYYMMDD>.md:
Header: profile, region, scan timestamp
Table: resource type | count | notes (e.g. running/stopped for EC2)
No ARNs, IDs, or IP addresses. ASR-5. Print to conversation: resource type → count only (no ARNs, IDs, IPs).

Rules

Read-only: list-, describe-, get-* only.
Identifiers must NOT appear in conversation.
Use --no-paginate; fall back to --max-items 1000 where needed.
Skip on AccessDeniedException — log to state file, continue.

Skip Conditions

Skip if $AWS_STATE_DIR/resources-<YYYYMMDD>.json exists and is less than 4 hours old.

Más de este repositorio

mismo repositorio

clarify-intent

nirecom/agents

Conduct a decision-tree interview with the user to lock in requirements, motivation, scope, and non-goals before planning.

2026-07-112

make-detail-plan

nirecom/agents

Stage 3 of three-stage planning pipeline. Produce a file-level implementation plan via detail-planner/detail-reviewer loop, then get user approval. Inputs are confirmed intent (<session-id>-intent.md) and outline (<session-id>-outline.md) from prior stages.

2026-07-112

write-code

nirecom/agents

Edit source code for the current task. Delegates editing and lint/typecheck/self-repair to a subagent.

2026-07-112

write-tests

nirecom/agents

Plan and write test cases with high reasoning effort. Test iteration runs in a subagent to minimize confirmations.

2026-07-112

survey-code

nirecom/agents

Explore the codebase to understand existing patterns, constraints, and relevant files before planning.

2026-07-112

survey-history

nirecom/agents

Investigate git history, docs/history.md, and GitHub issue/PR timeline since the relevant issue opened, to surface changes that may invalidate the issue's premises.

2026-07-112

name	aws-scan-resources
description	Enumerate AWS compute, storage, network, and IAM resources and write a structured inventory to AWS_STATE_DIR.
model	sonnet
effort	medium
context	fork

Procedure

ASR-1. Verify: aws CLI, AWS_PROFILE, AWS_STATE_DIR. ASR-2. Enumerate with read-only CLI (pass --profile $AWS_PROFILE --region $AWS_DEFAULT_REGION on every call):

EC2: aws ec2 describe-instances --query 'Reservations[].Instances[].{id:InstanceId,state:State.Name,type:InstanceType}'
ECS: aws ecs list-clusters + aws ecs list-services --cluster <name>
Lambda: aws lambda list-functions --query 'Functions[].{name:FunctionName,runtime:Runtime}'
S3: aws s3api list-buckets --query 'Buckets[].Name'
EBS: aws ec2 describe-volumes --query 'Volumes[].{id:VolumeId,size:Size,state:State}'
RDS: aws rds describe-db-instances --query 'DBInstances[].{id:DBInstanceIdentifier,engine:Engine}'
VPC/SG: aws ec2 describe-vpcs, aws ec2 describe-security-groups
IAM: aws iam list-users, aws iam list-roles, aws iam list-policies --scope Local ASR-3. Write raw data to $AWS_STATE_DIR/resources-<YYYYMMDD>.json. Single-region scope. ASR-4. Write human-readable summary to $AWS_STATE_DIR/resources-<YYYYMMDD>.md:
Header: profile, region, scan timestamp
Table: resource type | count | notes (e.g. running/stopped for EC2)
No ARNs, IDs, or IP addresses. ASR-5. Print to conversation: resource type → count only (no ARNs, IDs, IPs).

Rules

Read-only: list-, describe-, get-* only.
Identifiers must NOT appear in conversation.
Use --no-paginate; fall back to --max-items 1000 where needed.
Skip on AccessDeniedException — log to state file, continue.

Skip Conditions

Skip if $AWS_STATE_DIR/resources-<YYYYMMDD>.json exists and is less than 4 hours old.