aws-scan

name	aws-scan
description	Orchestrate a full AWS infrastructure scan across resources, security, cost, and applications.
model	opus
effort	high
context	fork

Procedure

AS-1. Verify: aws --version, AWS_PROFILE set, AWS_STATE_DIR set (default ~/.aws-state). Create dir if absent. AS-2. Invoke /aws-scan-resources AS-3. Invoke /aws-scan-security AS-4. Invoke /aws-scan-cost AS-5. Invoke /aws-scan-apps AS-6. Write consolidated summary to $AWS_STATE_DIR/scan-.md

Rules

• Read-only API calls only. Never mutate resources.
• All output to $AWS_STATE_DIR only. Never write to public repo paths.
• Account IDs, ARNs, IP addresses must NOT appear in conversation.
• AWS_STATE_DIR and AWS_WORK_DIR never hardcoded. Default AWS_STATE_DIR to ~/.aws-state if unset.
• Exit early on QNAP ($OSDIST = "qnap").

Skip Conditions

Invoke a sub-skill directly when only one phase is needed.