skills.rest
lauhon
lauhonCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

herd-cli

Guides safe herd CLI usage for AWS access, privilege elevation, and ECS scaling operations.

5|2|Updated Mar 9, 2026
Search Tags:#authentication#aws#cli#credentials#herd#privilege elevation#ecs scaling
One-click install
npx skills add https://github.com/lauhon/pi --skill herd-cli-lauhon
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: herd-cli
Source: https://github.com/lauhon/pi/tree/main/skills/herd-cli
Command: npx skills add https://github.com/lauhon/pi --skill herd-cli-lauhon

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Engineers using the herd CLI for AWS access risk accidental privilege misuse, credential exposure, or unintended infrastructure changes. This Skill enforces a safety contract that defaults to read-only developer access, requires explicit confirmation before PowerUser elevation, and prevents credential leakage through agent command capture. ## Core Features & Use Cases - Safe AWS Authentication: Runs herd aws login and verifies identity with the developer profile before any operation. - Controlled Privilege Elevation: Elevates to the PowerUser profile only after explaining the write operation and obtaining explicit user confirmation. - Credential Protection: Blocks herd aws elevate --creds in agent contexts and never prints or relays access keys or session tokens. - Use Case: You need to scale an ECS service. The Skill confirms the app, server group, account, and target count with you, elevates temporarily, runs herd aws ecs scale, then returns to the read-only developer profile. ## Quick Start Ask the assistant to check your AWS identity and cloud status using herd with the read-only developer profile.

Frequently Asked Questions about herd-cli

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I safely elevate AWS privileges with herd CLI?▼

Run `herd aws elevate --account <account-id>` only after stating the exact write operation and getting user confirmation. Use the `herd-<account-slug>-power` profile solely for the confirmed change, then return to the developer profile.

How do I verify my AWS identity before running herd commands?▼

Run `aws --profile herd-<account-slug> sts get-caller-identity` after `herd aws login` to confirm the account and role. If the identity differs from the confirmed target, stop immediately.

Why should I avoid herd aws elevate --creds in an AI agent?▼

The command prints temporary credentials to stdout, which agent command execution captures and may log. Run it personally in a terminal outside agent capture and never paste or relay its output.

What happens if the herd binary is not installed?▼

The Skill stops and directs you to the installation instructions without downloading or executing the installer on your behalf. Work resumes only after you confirm herd is on PATH.

When is confirmation required before running herd commands?▼

Confirmation is required before any consequential operation, including ECS scaling, infrastructure changes, and destructive actions. Read-only inspection with the developer profile proceeds without elevation.

Related Skills

Explore More Software Engineering Skills→
goldsky-iogoldsky-io
8

auth-setup

Authenticate and configure Goldsky CLI access with token-based login.

Official
Advanced
RaheesAhmedRaheesAhmed
66

devops-patterns

Automate cloud-native DevOps workflows for Docker, Kubernetes, and GitHub Actions.

Community
Advanced
xalgordxalgord
954

securing-aws-lambda-execution-roles

Implements least-privilege IAM execution roles for AWS Lambda functions using Access Analyzer and permission boundaries.

Community
Advanced
waybarrioswaybarrios
507

hf-cloud-aws-context-discovery

Discover the active AWS profile, region, account, and caller identity before AWS work.

Community
Intermediate