APEX Skills
28 AWS skills for Amazon EKS and ECS: architecture, Terraform, live cluster review, upgrade checks and security.
- 98 ★ on the repository
- Last commit
- MIT-0
Extended access
Why this level
- The skills work through `aws`, `kubectl` and Terraform with your account permissions, and some flows deploy and migrate workloads.
- Generated infrastructure can cost money and change a working environment if applied without review.
Install
- Works in
In your terminal, with SkillFoxx CLI
npx skillfoxx add skills/apex-skillsDetects the agents on your machine, shows the access level and pins the version.
Other ways to install
Access and checks
How we reviewExtended accessThe tool runs code or makes network calls and only reads external data.
- The skills work through `aws`, `kubectl` and Terraform with your account permissions, and some flows deploy and migrate workloads.
- Generated infrastructure can cost money and change a working environment if applied without review.
This is third-party code. Review the repository files before installing.
What it does
APEX Skills is a set of 28 skills in the Agent Skills standard for platform engineering on Amazon EKS and Amazon ECS. The skills cover the work stages: architecture design (`eks-design`, `ecs-architect`), Terraform generation (`eks-build`, `ecs-build`), releases, live cluster review (`eks-recon`, `eks-operation-review`, `eks-cost-intelligence`), upgrade readiness (`eks-upgrade-check`), migrations (Gateway API, Graviton) and security (`eks-security`, `ecs-security`). The `/apex` router picks the right skill for a request. Six Day 2 skills are ported to `devops-agent/` for AWS DevOps Agent. The `apex-skills` installer supports Claude Code and Kiro CLI, and Codex skills are copied by hand.
Who it is for. Platform and DevOps engineers who run Amazon EKS and ECS clusters and want the agent to follow ready-made AWS runbooks.
Good fit when
- Before an EKS version upgrade you need a readiness score: deprecated APIs, add-ons, 8 assessed areas.
- For a new ECS service you choose between Fargate, EC2 and Managed Instances.
- An agent generates Terraform for an EKS cluster with ArgoCD GitOps.
- A live cluster is surveyed for an operations review or a wasted-spend estimate.
- NGINX Ingress is moved to Gateway API.
Not a fit when
- The cloud is not AWS: the skills are built for EKS and ECS.
- Generated infrastructure would be applied without review: the authors call the repository sample code for education and demonstration.
- The agent has no AWS CLI or cluster access, but a review of a live environment is needed.
Example request
/apex is my EKS cluster ready to upgrade to 1.32? Check deprecated APIs and add-on compatibility and give a score.Limitations
The aws-samples repository is, in the authors' words, for education and demonstration: review Terraform and manifests before applying. The installer runs on macOS and Linux (WSL on Windows) and needs Node.js 18 or newer. `npx apex-skills@1.3.0` installs the latest published release without the `/apex` router; the router needs the `--branch main` flag. Five skills are vendored from third-party projects, listed in the Provenance section.
How to disable. Remove the skill links and the `~/.apex-skills/` directory the installer creates. Update and uninstall flags are described in the installer README `misc/installer/README.md`.
FAQ
How do I install the skills in Claude Code?
Run `npx apex-skills@1.3.0`: the installer detects Claude Code and Kiro CLI, clones the repository into `~/.apex-skills/` and links the skills. Add `--branch main` for the `/apex` router.
How do I install in Codex?
The installer does not set up Codex. Clone the repository and copy `skills/*` into `~/.agents/skills/`; the router is `$apex` there.
Do the skills change the cluster?
Surveys and checks are described as read-only, while deploy, migration and Terraform flows act through your tools and account, so review the plan before applying.
Which Node.js version is required?
Node.js 18 or newer, plus git. The installer runs on macOS and Linux, and on Windows through WSL.
What is `devops-agent/`?
Six Day 2 skills (recon, security, upgrade-check and others) repackaged for autonomous runs in AWS DevOps Agent.
Discussion
No questions or reviews yet.
Related
SkillsA set of skills for agent work with AWS: common cloud service tasks packaged as ready instructions for a coding agent
Forty-five skills, custom agents and CloudFormation templates for AWS DevOps Agent: incident analysis and operations reviews
KubeShark skill: the agent finds the failure mode first, then writes manifests, Helm and Kustomize to official practice with a rollback plan
A large base of DevOps, security, infrastructure and compliance skills for AI agents
AWS's official set of MCP servers, skills and plugins so an agent can build, deploy and operate on AWS
31 DevOps skills for Claude Code and Codex: config generators, validators and a Kubernetes debugger for Terraform, Helm, CI and Docker
Comparison with similar tools
Cards that share the main search query, and how they differ.
| Tool | Official | Repository stars | Main difference |
|---|---|---|---|
| APEX Skills (this card) | no | 98 | |
| AWS Agent Skills | no | 1,175 | general instructions for AWS services; APEX focuses on EKS and ECS across design, build, operations and security |
| Kubernetes Skill | no | 477 | writes manifests, Helm and Kustomize starting from failure modes; APEX surveys live EKS clusters and covers lifecycle stages |
README in short
The README groups skills by stage: design, build, assess, upgrade, secure. Each stage has a table, worked examples with screenshots and a section on the origin of five vendored skills.