SageMaker IAM Role Preflight
huggingface/skills
Finds or validates a usable SageMaker execution role before deploying or training, so scripts do not try to create IAM roles they lack permission to create.
Bake, select, prove, and safely retire a Cloud Worker image with crabbox and config one-liners.
MITAuto-check passed
Install Cloud Image Bake
$ npx skills add openclaw/openclaw --skill cloud-image-bake -a claude-codeProject install by default; add -g for ~/.claude/skills/.
$ gh skill install openclaw/openclaw cloud-image-bake --agent claude-codeProject scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).
$ git clone --depth 1 https://github.com/openclaw/openclaw.git skills-src && mkdir -p .claude/skills && cp -r skills-src/custodian-skills/cloud-image-bake .claude/skills/cloud-image-bake && rm -rf skills-srcUse ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.
Claude Code skills documentation · loads skills from .claude/skills/
Install the "cloud-image-bake" agent skill from https://github.com/openclaw/openclaw/tree/main/custodian-skills/cloud-image-bake into .claude/skills/cloud-image-bake/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "cloud-image-bake", then confirm the skill loads.Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$skill-installer install https://github.com/openclaw/openclaw/tree/main/custodian-skills/cloud-image-bakeType this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.
$ npx skills add openclaw/openclaw --skill cloud-image-bake -a codexProject install goes to .agents/skills/; add -g for ~/.codex/skills/.
$ gh skill install openclaw/openclaw cloud-image-bake --agent codexProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/openclaw/openclaw.git skills-src && mkdir -p .agents/skills && cp -r skills-src/custodian-skills/cloud-image-bake .agents/skills/cloud-image-bake && rm -rf skills-srcUse ~/.agents/skills/ instead of .agents/skills for a personal install.
Codex skills documentation · loads skills from .agents/skills/
Install the "cloud-image-bake" agent skill from https://github.com/openclaw/openclaw/tree/main/custodian-skills/cloud-image-bake into .agents/skills/cloud-image-bake/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "cloud-image-bake", then confirm the skill loads.Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add openclaw/openclaw --skill cloud-image-bake -a cursorProject install goes to .agents/skills/; add -g for ~/.cursor/skills/.
$ gh skill install openclaw/openclaw cloud-image-bake --agent cursorProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/openclaw/openclaw.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/custodian-skills/cloud-image-bake .cursor/skills/cloud-image-bake && rm -rf skills-srcUse ~/.cursor/skills/ instead of .cursor/skills for a personal install.
Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/
Install the "cloud-image-bake" agent skill from https://github.com/openclaw/openclaw/tree/main/custodian-skills/cloud-image-bake into .cursor/skills/cloud-image-bake/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "cloud-image-bake", then confirm the skill loads.Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gemini skills install https://github.com/openclaw/openclaw.git --path custodian-skills/cloud-image-bake--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.
$ npx skills add openclaw/openclaw --skill cloud-image-bake -a gemini-cliProject install goes to .agents/skills/; add -g for ~/.gemini/skills/.
$ gh skill install openclaw/openclaw cloud-image-bake --agent gemini-cliProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/openclaw/openclaw.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/custodian-skills/cloud-image-bake .gemini/skills/cloud-image-bake && rm -rf skills-srcUse ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.
Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/
Install the "cloud-image-bake" agent skill from https://github.com/openclaw/openclaw/tree/main/custodian-skills/cloud-image-bake into .gemini/skills/cloud-image-bake/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "cloud-image-bake", then confirm the skill loads.Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gh skill install openclaw/openclaw cloud-image-bakeInstalls for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).
$ npx skills add openclaw/openclaw --skill cloud-image-bake -a github-copilotProject install goes to .agents/skills/; add -g for ~/.copilot/skills/.
$ git clone --depth 1 https://github.com/openclaw/openclaw.git skills-src && mkdir -p .github/skills && cp -r skills-src/custodian-skills/cloud-image-bake .github/skills/cloud-image-bake && rm -rf skills-srcUse ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.
GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/
Install the "cloud-image-bake" agent skill from https://github.com/openclaw/openclaw/tree/main/custodian-skills/cloud-image-bake into .github/skills/cloud-image-bake/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "cloud-image-bake", then confirm the skill loads.GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add openclaw/openclaw --skill cloud-image-bake -a opencodeOpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.
$ gh skill install openclaw/openclaw cloud-image-bake --agent opencodeProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/openclaw/openclaw.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/custodian-skills/cloud-image-bake .opencode/skills/cloud-image-bake && rm -rf skills-srcUse ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.
OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/
Install the "cloud-image-bake" agent skill from https://github.com/openclaw/openclaw/tree/main/custodian-skills/cloud-image-bake into .opencode/skills/cloud-image-bake/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "cloud-image-bake", then confirm the skill loads.OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
Facts
- Skill name
cloud-image-bake- GitHub stars
- 392k
- Token cost
- ~975 tokens
- SKILL.md length
- 421 words
- Files
- 1
- Skills in repo
- 93
- Repo updated
- First seen
- Licence
- MIT
At a glance
Bake, select, prove, and safely retire a Cloud Worker image with crabbox and config one-liners.
- SKILL.md covers Gather, Mutate, Repair and Prove, plus 1 more section
- Calls hcloud and jq
What it does
Cloud Image Bake is an agent skill from openclaw/openclaw. Bake, select, prove, and safely retire a Cloud Worker image with crabbox and config one-liners.
Its SKILL.md is about 980 tokens, which your agent loads only when the skill is triggered. It is a single SKILL.md file with no bundled scripts.
It works with Amazon Web Services. The repository describes itself as: The AI that really does things. Any OS. Any Platform. The lobster way. 🦞. The licence is MIT.
Example prompts
- “/cloud-image-bake”
What it can do on your machine
Read from SKILL.md and the folder at commit 1eb5970. It shows what the files ask for, not the result of running them.
Tool permissions
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
Runs code
Shell commands in SKILL.md call:
hcloudjq
From the folder's file list and the shell code blocks in SKILL.md.
Network
Links to these hosts (documentation or services it may open):
docs.openclaw.ai
From URLs in SKILL.md, links to its own repository left out.
Credentials
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.
Context cost
Cloud Image Bake loads about 975 tokens when it runs. Until then it costs about 28 tokens; SKILL.md has 421 words of instructions outside code blocks.
Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.
Safety
Auto-check passed
The automated check found no risky patterns in SKILL.md.
Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.
SKILL.md
The full file from openclaw/openclaw at commit 1eb5970, republished under its MIT licence (© openclaw). 421 words, ~975 tokens.
Download SKILL.mdSave it as
.claude/skills/cloud-image-bake/SKILL.md (or your agent's skills folder).- name
- cloud-image-bake
- description
- Bake, select, prove, and safely retire a Cloud Worker image with crabbox and config one-liners.
Bake a Cloud Worker image
Never print or persist secret values; provider credentials stay in their stores. Never hand-edit config files on disk — profile changes go through openclaw config. Every run ends with the observable Prove result or an exact explanation of why it could not be proven. Snapshots are cheap; unmanaged snapshot sprawl is not. Never delete a provider image without hard operator confirmation.
Gather
openclaw config get cloudWorkers --json
crabbox config show --json
crabbox doctor --provider <backend> --json
crabbox checkpoint list --jsonRecord the current provider, class, image selection, setup command, and the id of the image being superseded. Confirm the requested tooling and a secret-free bake source.
Mutate
Lease from the current profile, install and smoke-test the tooling:
crabbox warmup --provider <backend> --class <class> --keep --timing-json
crabbox run --provider <backend> --id <lease> --no-sync -- bash -lc '<install commands> && <tool> --version'Snapshot per backend:
- AWS:
crabbox checkpoint create --provider aws --id <lease> --mode native --strategy image --wait, inspect it, thencrabbox image promote <ami-id>with the matching scope. AWS image selection is owned by the promote catalog. - Hetzner:
hcloud image create --type snapshot --server <server-id> --description <name>; there is no crabbox create/promote lifecycle for Hetzner yet, so record the snapshot id explicitly. - Firecracker: rebuild and republish the rootfs template through the host's template pipeline; do not snapshot a running microVM as a substitute.
Point the profile at the new selection only through validated config writes — confirm the exact key first, dry-run, then write (example for a backend whose settings carry an image field):
openclaw config schema --json | jq '.properties.cloudWorkers'
openclaw config set cloudWorkers.profiles.<profile>.settings.<imageKey> "<image-id>" --dry-run
openclaw config set cloudWorkers.profiles.<profile>.settings.<imageKey> "<image-id>"The bundled crabbox profile currently has no image settings key — AWS selection lives in crabbox image promote; never invent a config field. Preserve the old image until proof passes.
Show full SKILL.md (177 more words)Show less
Repair
openclaw doctor --lint
crabbox doctor --provider <backend> --jsondoctor --lint can exit 1 for findings: read the report and continue the remaining checks. Ordinary doctor and doctor --non-interactive can write config/state; do not use them for diagnosis before approval. Apply openclaw doctor --fix --non-interactive only after explicit approval, then re-read the profile and provider inventory.
Prove
Lease once from the new image and verify the baked tooling is present and fast:
crabbox warmup --provider <backend> --class <class> --timing-json
crabbox run --provider <backend> --id <lease> --no-sync -- bash -lc '<tool> --version'
crabbox stop --provider <backend> --id <lease>Record warmup total and compare against the pre-bake timing. Then confirm the OpenClaw path end to end: dispatch one session to the profile from a client (Cloud destination) and verify the placement reaches active. If any step fails, roll back the image selection and report the exact blocker.
Report
Report the profile, backend, new and previous image ids, tooling smoke result, timed warmup before/after, and rollback state. Only after successful proof, show the exact deletion target and get hard operator confirmation, then delete only that superseded snapshot (crabbox image delete <id> or hcloud image delete <id>) and verify it is gone. Without confirmation, leave it intact and report cleanup pending.
Further reference: https://docs.openclaw.ai/gateway/cloud-workers
© openclaw, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file
Files
Just SKILL.md in custodian-skills/cloud-image-bake of openclaw/openclaw.
Open the folder on GitHubat commit 1eb5970
Compare with similar skills
Cloud Image Bake next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.
| Skill | Stars | Used in | Tokens | Auto-check | Licence | Repo updated |
|---|---|---|---|---|---|---|
| Cloud Image Bake this skillopenclaw/openclaw | 392k | — | ~975 | Automated safety check: Pass | MIT | |
| SageMaker IAM Role Preflighthuggingface/skills | 11k | 1 repos | ~1.8k | Automated safety check: Pass | Apache-2.0 | |
| SageMaker Serving Image Selectionhuggingface/skills | 11k | 1 repos | ~4.6k | Automated safety check: Pass | Apache-2.0 | |
| Cloud Cost Optimizationwshobson/agents | 40k | 14 repos | ~1.7k | Automated safety check: Pass | MIT | |
| Agent Squad Python Guide2FastLabs/agent-squad | 7.8k | — | ~4.7k | Automated safety check: Pass | Apache-2.0 | |
| Paperclip Pagepaperclipai/paperclip | 99k | — | ~1k | Automated safety check: Pass | MIT |
Similar skills
- Official
- Official
SageMaker Serving Image Selection
huggingface/skills
Chooses the right serving container and current image URI for deploying a Hugging Face model to a SageMaker endpoint, preferring Hugging Face images over generic ones.
Cloud Cost Optimization
wshobson/agents
Cuts cloud spend across AWS, Azure, GCP and OCI with cost tagging, rightsizing, commitment and spot pricing models, and architecture changes.
Agent Squad Python Guide
2FastLabs/agent-squad
Map of the agent-squad Python framework for async multi-agent orchestration: which agent, classifier, storage and tool provider to pick, and the pitfalls to avoid.
Paperclip Page
paperclipai/paperclip
Publish static HTML pages and asset folders to the Paperclip S3/CloudFront page host.
- Official
Review Docs
hashicorp/terraform-provider-aws
Review a Terraform AWS Provider PR's end-user documentation (website/docs//.markdown): whether docs are needed, description openings, argument/attribute style, section structure, tags wording, code…
More from openclaw/openclaw
All 93 skills in this repoOpenclaw Live Updater
openclaw/openclaw
Maintain the canonical live OpenClaw main checkout, macOS LaunchAgent-managed Gateway, local macOS app, exact-head main CI, and recurring full release validation.
Tmux
openclaw/openclaw
Control tmux sessions/panes for interactive CLIs: list, capture output, send keys, paste text, monitor prompts.
Feishu Doc
openclaw/openclaw
Feishu document read/write workflows. An agent skill from openclaw/openclaw.
Openclaw PR Maintainer
openclaw/openclaw
Review, triage, repair, or land OpenClaw issues and pull requests with current-source evidence and the native maintainer workflow.
Browser Automation
openclaw/openclaw
A skill your agent uses when controlling web pages with the OpenClaw browser tool, especially multi-step flows, login checks, tab management, or recovery from stale refs/timeouts.
Clawsweeper
openclaw/openclaw
A skill your agent uses for all ClawSweeper work: OpenClaw issue/PR sweep reports, repair jobs, cloud fix PRs, @clawsweeper maintainer mention commands, trusted ClawSweeper-reviewed…
Related
Works with
Questions about Cloud Image Bake
What does Cloud Image Bake do?
Bake, select, prove, and safely retire a Cloud Worker image with crabbox and config one-liners. Cloud Image Bake is an agent skill from openclaw/openclaw. Bake, select, prove, and safely retire a Cloud Worker image with crabbox and config one-liners.
How do I install Cloud Image Bake in Claude Code?
Run `npx skills add openclaw/openclaw --skill cloud-image-bake -a claude-code`. Or copy the skill folder (custodian-skills/cloud-image-bake in openclaw/openclaw) into .claude/skills/cloud-image-bake in your project. Claude Code loads it when a task matches its description.
How do I install Cloud Image Bake in Codex?
Run `npx skills add openclaw/openclaw --skill cloud-image-bake -a codex`. Or copy the skill folder (custodian-skills/cloud-image-bake in openclaw/openclaw) into .agents/skills/cloud-image-bake in your project. Codex loads it when a task matches its description.
Can I use Cloud Image Bake in Cursor, Gemini CLI or GitHub Copilot?
Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add openclaw/openclaw --skill cloud-image-bake -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/cloud-image-bake, .gemini/skills/cloud-image-bake, .github/skills/cloud-image-bake and .opencode/skills/cloud-image-bake in your project.
What does Cloud Image Bake need to run?
Going by SKILL.md and its folder, Cloud Image Bake needs the command-line tools its instructions call (hcloud and jq).
Does Cloud Image Bake access the network?
SKILL.md names 1 domain. As links in the text: docs.openclaw.ai. This is read from the text; nothing was executed.
Is Cloud Image Bake safe to install?
Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.
What licence does Cloud Image Bake use?
Cloud Image Bake is published under the MIT licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.
How many tokens does Cloud Image Bake use?
About 975 tokens (SKILL.md is roughly 3.9k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.
What are the alternatives to Cloud Image Bake?
Skills that share tags, products or a category with Cloud Image Bake: SageMaker IAM Role Preflight (huggingface/skills, 11k stars), SageMaker Serving Image Selection (huggingface/skills, 11k stars), Cloud Cost Optimization (wshobson/agents, 40k stars) and Agent Squad Python Guide (2FastLabs/agent-squad, 7.8k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.
Who maintains Cloud Image Bake?
openclaw (a GitHub organization) maintains it in openclaw/openclaw, which has 391,610 GitHub stars. The repository holds 93 skills in this directory. The repository was last updated on October 8, 2026.
Source: openclaw/openclaw on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.