Topic · DevOps & Cloud
Best cloud architecture skills for Claude Code, Codex and other agents.
- skills
- 114
- official
- 38
Cloud architecture skills, ranked
Ranked by score. Sort bymost stars,trending,newest,recently updated
| # | Skill | Repository | Stars | Used in | Tokens | Auto-check | Licence | Updated |
|---|---|---|---|---|---|---|---|---|
| 1 | Cuts cloud spend across AWS, Azure, GCP and OCI with cost tagging, rightsizing, commitment and spot pricing models, and architecture changes. | wshobson/ | 40k | 13 repos | ~1.7k | Automated safety check: Pass | MIT | 2 days ago |
| 2 | Designs Azure infrastructure from a natural-language description, or diagrams an existing resource group, then refines the design through conversation and deploys it with Bicep. | github/ | 40k | 1 repo | ~1.9k | Automated safety check: Pass | MIT | today |
| 3 | Answers AWS architecture, security and service-selection questions by searching AWS documentation through MCP tools first, then adapting advice to your stack and team. | tech-leads-club/ | 7k | — | ~2.1k | Automated safety check: Pass | CC-BY-4.0 | 17 days ago |
| 4 | A skill your agent uses when the user asks for an AWS architecture diagram — VPC/networking, event-driven, landing zone, multi-AZ, serverless pipeline, or any diagram built with AWS service icons. | sparklabx/ | 652 | — | ~1.6k | Automated safety check: Pass | MIT | 5 days ago |
| 5 | Comprehensive technical diagramming toolkit for solutions architects, presales, and developers. | cmb211087/ | 150 | — | ~4k | Automated safety check: Notes | MIT | 3 mo ago |
| 6 | "Learn then Build" — help developers understand AWS Well-Architected best practices for their specific workload, then produce actionable visual artifacts (architecture diagrams with WA annotations… | aws-samples/ | 273 | — | ~3.8k | Automated safety check: Pass | MIT-0 | yesterday |
| 7 | Detect dangling DNS records and subdomain-takeover risks across a multi-cloud environment by running the bundled findmytakeover tool. | anirudhbiyani/ | 180 | — | ~1.8k | Automated safety check: Pass | GPL-3.0 | 1 mo ago |
| 8 | A skill your agent uses when the user asks for an Azure architecture diagram — VNet/networking, App Service, AKS, landing zone, multi-region, or any diagram built with Azure service icons. | sparklabx/ | 652 | — | ~1.6k | Automated safety check: Pass | MIT | 5 days ago |
| 9 | A skill your agent uses when authoring, reviewing, or refactoring Azure Bicep code. | timothywarner-org/ | 224 | — | ~2.9k | Automated safety check: Pass | MIT | 2 mo ago |
| 10 | Always use when user asks to create, generate, or build an AWS architecture diagram, cloud infrastructure diagram, or system diagram with AWS services. | vidanov/ | 159 | — | ~4.4k | Automated safety check: Pass | MIT | 3 days ago |
| 11 | Design AWS architectures for startups using serverless patterns and IaC templates. | alirezarezvani/ | 28k | 1 repo | ~2.5k | Automated safety check: Pass | MIT | 1 mo ago |
| 12 | Generate preventive Well-Architected guardrails — AWS Config rules, Service Control Policies, permission boundaries, CloudWatch alarms, and IaC policy checks (CDK Aspects, cfn-guard, OPA/Sentinel) —… | aws-samples/ | 273 | — | ~2.8k | Automated safety check: Pass | MIT-0 | yesterday |
| 13 | Generate AWS architecture diagrams in draw.io format. An agent skill from vidanov/aws-architecture-diagram-skill. | vidanov/ | 159 | — | ~4.9k | Automated safety check: Pass | MIT | 3 days ago |
| 14 | Creates and edits AWS architecture diagrams as DrawIO XML, converting a text description or an image and reading existing files back into shapes. | a5c-ai/ | 1.8k | — | ~4.2k | Automated safety check: Pass | MIT | 21 days ago |
| 15 | Designs GCP infrastructure as local Terraform, validates and scans it against best practices, then imports it to Application Design Center for deployment and troubleshooting. | google/ | 21k | — | ~4.4k | Automated safety check: Pass | Apache-2.0 | today |
| 16 | Configure secure, high-performance connectivity between on-premises infrastructure and cloud platforms using VPN and dedicated connections. | wshobson/ | 40k | 10 repos | ~1.5k | Automated safety check: Pass | MIT | 2 days ago |
| 17 | Build reusable, tested Terraform modules for AWS, Azure, GCP and OCI, with a standard file layout, an AWS VPC example, versioning rules and Terratest checks. | wshobson/ | 40k | 10 repos | ~1.3k | Automated safety check: Pass | MIT | 2 days ago |
| 18 | Creates DrawIO XML diagrams of Google Cloud architectures from text or images, and analyzes existing .drawio files to list their GCP components. | a5c-ai/ | 1.8k | — | ~3.7k | Automated safety check: Pass | MIT | 21 days ago |
| 19 | Perform a full AWS Well-Architected Framework review evaluating all 57 questions across 6 pillars by analyzing code, IaC, and configurations to produce evidence-backed findings with… | aws-samples/ | 273 | — | ~11k | Automated safety check: Pass | MIT-0 | yesterday |
| 20 | Intrinsic Core zero-cloud architecture, core primitives (Assets, Services, Skills, Solutions, ICON), CLI inspection commands, and workspace search rules. | intrinsic-ai/ | 552 | — | ~2.6k | Automated safety check: Pass | Apache-2.0 | today |
| 21 | Design multi-cloud architectures using a decision framework to select and integrate services across AWS, Azure, and GCP. | HermeticOrmus/ | 111 | 10 repos | ~1.2k | Automated safety check: Pass | MIT | 2 days ago |
| 22 | Interviews you about data model, workload and scale, then recommends one Google Cloud database from a decision matrix and drafts starter provisioning code for review. | google/ | 21k | — | ~1.7k | Automated safety check: Pass | Apache-2.0 | today |
| 23 | Guides Azure solution design by category, from reference architectures and design patterns to technology choices and migrations, fetching current Microsoft Learn pages over the network. | MicrosoftDocs/ | 775 | — | ~15k | Automated safety check: Pass | CC-BY-4.0 | yesterday |
| 24 | Creates and edits architecture diagrams through the Draw.io MCP tool, with guidance for rendering Azure icons correctly and laying out network diagrams. | thomast1906/ | 202 | — | ~3.1k | Automated safety check: Pass | No licence | 2 mo ago |
| 25 | Expert cloud architect specializing in AWS/Azure/GCP multi-cloud infrastructure design, advanced IaC (Terraform/OpenTofu/CDK), FinOps cost optimization, and modern architectural patterns. | davila7/ | 32k | 7 repos | ~1.9k | Automated safety check: Pass | MIT | today |
| 26 | Designs cloud architectures, migration plans, cost optimization recommendations and disaster recovery strategies across AWS, Azure and GCP. | Jeffallan/ | 12k | — | ~1.9k | Automated safety check: Pass | MIT | 4 days ago |
| 27 | Writes reusable Terraform modules and manages state, providers and environments across AWS, Azure and GCP, with validation, plan review and explicit apply approval. | Jeffallan/ | 12k | — | ~1.4k | Automated safety check: Pass | MIT | 4 days ago |
| 28 | Reference guidance for Azure Advisor work: recommendations, alerts and digests, workbooks, RBAC access and sovereign-cloud limits, fetched from Microsoft Learn. | MicrosoftDocs/ | 775 | — | ~1.7k | Automated safety check: Pass | CC-BY-4.0 | yesterday |
| 29 | Manages Amazon DocumentDB end-to-end — serverless-on-8.0 cluster setup, TLS/VPC/driver config, flexible-schema and vector-search data modeling, MongoDB compatibility assessment, DMS-based migration… | aws/ | 2.8k | — | ~5.9k | Automated safety check: Pass | Apache-2.0 | today |
| 30 | Compare a Draw.io Azure architecture diagram against a live Azure environment to detect drift. | Azure/ | 101 | — | ~3.7k | Automated safety check: Pass | MIT | 1 mo ago |
| 31 | Help a facilitator run a conversational Well-Architected Framework Review (WAFR) with a customer — generates tailored facilitator questions, probing follow-ups, and "things to look out for" per WA… | aws-samples/ | 273 | — | ~5.2k | Automated safety check: Warn | MIT-0 | yesterday |
| 32 | Deep-compare a Draw.io Azure architecture diagram against a live Azure environment — checks both resource existence AND every tracked configuration property (SKU, size, settings, etc.) against… | Azure/ | 101 | — | ~3.9k | Automated safety check: Pass | MIT | 1 mo ago |
| 33 | Cloud design patterns for distributed systems architecture covering 42 industry-standard patterns across reliability, performance, messaging, security, and deployment categories. | github/ | 40k | 1 repo | ~1.1k | Automated safety check: Pass | MIT | today |
| 34 | Implement multi-cloud CSPM to detect cloud-native misconfigurations and vulnerabilities (IAM over-permissions, exposed storage, unencrypted data, missing network controls) using AWS Security Hub… | mukul975/ | 34k | — | ~1.9k | Automated safety check: Pass | Apache-2.0 | 1 mo ago |
| 35 | Run Cartography to sync AWS, GCP, or Azure resources into a Neo4j graph database, mapping relationships such as IAM permission chains, network paths, and cross-account trust. | mukul975/ | 34k | — | ~1.7k | Automated safety check: Pass | Apache-2.0 | 1 mo ago |
| 36 | Generate validated AWS architecture diagrams as draw.io XML using official AWS4 icon libraries. | awslabs/ | 912 | — | ~3.8k | Automated safety check: Notes | Apache-2.0 | yesterday |
| 37 | Continuously monitor multi-cloud environments (AWS, Azure, GCP) for misconfigurations, compliance violations, and security risks using Prowler, ScoutSuite, AWS Security Hub, Microsoft Defender for… | mukul975/ | 34k | — | ~3k | Automated safety check: Pass | Apache-2.0 | 1 mo ago |
| 38 | Guides zero trust implementation across AWS, Azure, and GCP per NIST SP 800-207 and BeyondCorp principles, covering identity-centric access, micro-segmentation, continuous verification, device trust… | mukul975/ | 34k | — | ~3.3k | Automated safety check: Pass | Apache-2.0 | 1 mo ago |
| 39 | Deploys and configures Microsoft Defender for Cloud as a CNAPP for Azure, multi-cloud, and hybrid environments: enabling Defender plans for servers, containers, storage, and databases, configuring… | mukul975/ | 34k | — | ~3k | Automated safety check: Pass | Apache-2.0 | 1 mo ago |
| 40 | Design multi-cloud architectures using a decision framework to select and integrate services across AWS, Azure, GCP, and OCI. | wshobson/ | 40k | — | ~1.4k | Automated safety check: Pass | MIT | 2 days ago |
| 41 | 41.Recon Osint A skill your agent uses when mapping a target's external attack surface or gathering OSINT — subdomain enumeration, attack-surface mapping (httpx/katana/JS secrets), subdomain takeover… | hypnguyen1209/ | 386 | — | ~2.2k | Automated safety check: Pass | MIT | 9 days ago |
| 42 | Design Azure architectures for startups and enterprises. An agent skill from alirezarezvani/claude-skills. | alirezarezvani/ | 28k | — | ~3.4k | Automated safety check: Pass | MIT | 1 mo ago |
| 43 | Design GCP architectures for startups and enterprises. An agent skill from alirezarezvani/claude-skills. | alirezarezvani/ | 28k | — | ~3.2k | Automated safety check: Pass | MIT | 1 mo ago |
| 44 | Design cloud network architectures with VPC patterns, subnet strategies, zero trust principles, and hybrid connectivity. | ancoleman/ | 526 | — | ~3.9k | Automated safety check: Pass | MIT | 10 mo ago |
| 45 | Generates security-focused guidance for Google Cloud workloads based on the design principles and recommendations in the Google Cloud Well-Architected Framework (WAF). | google/ | 21k | 1 repo | ~4.2k | Automated safety check: Pass | Apache-2.0 | today |
| 46 | Convert a rough sketch or drawing of an Azure architecture into a professional Draw.io diagram using Azure-specific shapes. | Azure/ | 101 | — | ~3.5k | Automated safety check: Pass | MIT | 1 mo ago |
| 47 | 47.Oma Tf Infra Infrastructure-as-code specialist for multi-cloud provisioning using Terraform across any provider (AWS, GCP, Azure, Oracle Cloud). | first-fluke/ | 1.3k | — | ~2.8k | Automated safety check: Pass | MIT | yesterday |
| 48 | Design Azure cloud architectures from requirements and generate High-Level Design (HLD) documentation with service selection, patterns, cost estimates, and WAF alignment. | thomast1906/ | 202 | — | ~2.7k | Automated safety check: Pass | No licence | 2 mo ago |
Questions, answered from the data.
What is the best cloud architecture skill?
Cloud Cost Optimization from wshobson/agents ranks first of the 114 cloud architecture skills listed here, with the highest score: its repository has 40k GitHub stars, 13 other GitHub owners carry a copy, its SKILL.md loads about 1.7k tokens and it passes the automated safety check with no findings. Next come Azure Architecture Autopilot and AWS Cloud Advisor.
Which cloud architecture skills are official?
38 of the 114 cloud architecture skills are official, published by the vendor's own GitHub organization: Azure Architecture Autopilot, Wa Builder, Wa Guardrails, GCP Application Design Center Deploy, AWS Well Architected Framework Review and 33 more.
How are these skills ranked?
By Skill Navigator score, which combines the GitHub stars of the skill's repository (shared across that repo's skills and discounted for large collections), how many other GitHub owners carry a copy of the skill, and automated SKILL.md quality checks, minus penalties for safety-check warnings and for each further skill from the same repository. Skills that fail the safety check are not listed.
Explore related skills
Category
More topics in DevOps & Cloud
- Deployment1,152
- CI/CD921
- Containers723
- Observability562
- Container orchestration519
- Infrastructure as code351
- Monitoring and alerting333
- Secrets management318
- Runbooks and postmortems277
- Incident response271
- Cloud networking230
- Backup and disaster recovery170
- Site reliability engineering150
- MLOps101
- Cloud cost optimization93
- GitOps87
- Linux administration75
- Platform engineering51
- Chaos engineering28