automateyournetwork/aws-architecture-diagram
workspace/skills/aws-architecture-diagram/SKILL.md
AWS architecture diagrams — generate visual network topology diagrams from live AWS infrastructure. Use when drawing AWS network diagrams, visualizing VPCs, mapping Transit Gateway topology, or generating architecture documentation.
$ install --global
skillsauthnpx skillsauth add automateyournetwork/netclaw aws-architecture-diagramInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 20, 2026, 3:29 AM4.6s1 file scanned
SKILL.md
- name:
- aws-architecture-diagram
- description:
- AWS architecture diagrams — generate visual network topology diagrams from live AWS infrastructure. Use when drawing AWS network diagrams, visualizing VPCs, mapping Transit Gateway topology, or generating architecture documentation.
- version:
- 1.0.0
- license:
- Apache-2.0
- tags:
- [aws, diagram, architecture, visualization, topology]
AWS Architecture Diagram
MCP Server
- Command:
uvx awslabs.aws-diagram-mcp-server@latest(stdio transport) - Requires:
AWS_ACCESS_KEY_ID,AWS_SECRET_ACCESS_KEY,AWS_REGION(orAWS_PROFILE) - Dependency: Requires
graphvizinstalled on the system (apt install graphvizorbrew install graphviz)
Key Capabilities
- Auto-discovery: Scan AWS account and render infrastructure as a diagram
- Network topology: VPCs, subnets, route tables, IGW, NAT GW, TGW connections
- Service mapping: EC2, ELB, RDS, Lambda placed in their VPC/subnet context
- Multiple formats: PNG, SVG, PDF output
- Filtered views: Scope diagram to specific VPCs, services, or tags
Workflow: Network Architecture Diagram
When a user asks "draw our AWS network" or "show me the architecture":
- Generate diagram: Use diagram tool scoped to networking resources
- Include: VPCs, subnets (public/private), IGW, NAT GW, TGW, VPN, peering connections
- Label: CIDR blocks, subnet names, AZ placement
- Connections: Show routing paths — TGW attachments, peering links, VPN tunnels
- Output: PNG or SVG file for sharing in Slack or documentation
- Report: Architecture summary alongside the diagram
Workflow: VPC Detail Diagram
When focusing on a specific VPC:
- Scope to VPC: Filter diagram to one VPC by ID or tag
- Show subnets: Public, private, isolated — grouped by AZ
- Show route tables: Main and custom route tables with key routes
- Show gateways: IGW, NAT GW, VPC endpoints
- Show security: NACLs, security group relationships
- Output: Detailed VPC topology diagram
Workflow: Multi-Account Network Diagram
When documenting cross-account architecture:
- Hub-spoke topology: Show Transit Gateway as the hub
- VPC attachments: Each spoke VPC with its CIDR and purpose
- Route propagation: Show which routes propagate where
- VPN/DX: On-premises connections via VPN or Direct Connect
- Inspection VPC: Network Firewall placement if applicable
- Output: Enterprise network topology diagram
Integration with Other Skills
| Skill | How They Work Together |
|-------|----------------------|
| aws-network-ops | Discover VPCs/TGWs first, then diagram them |
| aws-cloud-monitoring | Add CloudWatch metrics annotations to diagram |
| aws-cost-ops | Annotate diagram with cost per resource |
| markmap-viz | Generate mindmap alternative for simpler overviews |
Diagram Scoping Tips
| Scope | When To Use | |-------|------------| | Full account | Initial architecture review or documentation | | Single VPC | Troubleshooting or VPC-specific audit | | TGW + attachments | Multi-VPC connectivity review | | Subnet-level | Security audit or routing investigation | | Tagged resources | Application-specific or team-specific views |
Important Rules
- Graphviz required — the MCP server generates Graphviz DOT files and renders them;
graphvizmust be installed - Large accounts may produce complex diagrams — scope with filters for clarity
- Region-specific — diagram shows resources in the configured AWS_REGION only
- Read-only — only discovers and renders, never modifies resources
- Record in GAIT — log diagram generation for audit trail
Environment Variables
AWS_ACCESS_KEY_ID,AWS_SECRET_ACCESS_KEY,AWS_REGION(orAWS_PROFILE)
Related Skills
automateyournetwork/zoom-meeting-context
tools
VerifiedTrustedCommunity
Zoom meeting intelligence — correlates a live or referenced Zoom meeting discussion against NetClaw's historical meeting record (via the official Zoom Meetings MCP) and today's actual network state. Use when someone in a Zoom meeting references a past discussion or incident ('didn't we have this issue before?'), or asks to search prior meetings for a topic. Does not itself recognize live in-meeting questions — that happens automatically inside zoom-rtms-mcp's own extractor (spec 118) before this skill is ever invoked.
644SKILL.mdUpdated Aug 27, 2026
automateyournetwork/percepxion-oob
tools
VerifiedTrustedCommunity
Manage Lantronix out-of-band (OOB) infrastructure via Percepxion central management platform: device inventory, serial port inspection via SLC CLI, firmware compliance, config management, security auditing, and closed-loop incident remediation. Use during outages, maintenance windows, compliance cycles, and AI-assisted automation workflows.
644SKILL.mdUpdated Aug 13, 2026
automateyournetwork/n2n-federation
tools
VerifiedTrustedCommunity
Federate your NetClaw with other NetClaw operators over the BGP mesh — exchange capability inventories and ask your claw what a peer can do. (US1; remote invocation and chat land in later phases.)
638SKILL.mdUpdated Jul 11, 2026
automateyournetwork/token-tracker
tools
VerifiedTrustedCommunity
Track token consumption, enforce session budgets, and display cost for every NetClaw interaction.
638SKILL.mdUpdated Apr 3, 2026