codyswanngt/lisa-setup-remote-aws
plugins/lisa-copilot/skills/lisa-setup-remote-aws/SKILL.md
Install and validate Lisa's drop-in AWS CLI bootstrap for remote coding environments. Supports Claude, Codex, Cursor, GitHub Copilot, Antigravity on user-managed hosts, OpenCode on user-managed hosts, and future Linux remote agents through one capability contract. Writes no secrets; it installs the common setup script, merges native Cursor/Copilot adapters, and emits exact operator guidance for the selected platform.
$ install --global
skillsauthnpx skillsauth add codyswanngt/lisa lisa-setup-remote-awsInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Jul 19, 2026, 3:59 AM140.4s1 file scanned
SKILL.md
- name:
- lisa-setup-remote-aws
- description:
- Install and validate Lisa's drop-in AWS CLI bootstrap for remote coding environments. Supports Claude, Codex, Cursor, GitHub Copilot, Antigravity on user-managed hosts, OpenCode on user-managed hosts, and future Linux remote agents through one capability contract. Writes no secrets; it installs the common setup script, merges native Cursor/Copilot adapters, and emits exact operator guidance for the selected platform.
- allowed-tools:
- ["Bash", "Read", "Write", "Glob", "Grep"]
Set up remote-agent AWS access: $ARGUMENTS
Install the vendor-neutral AWS bootstrap into the current repository.
Arguments
--platform=all|claude|codex|cursor|copilot|agy|opencode(defaultall)--project=<path>(default current working directory)--secret-name=<name>(defaultremote-agent-credentials)
Procedure
-
Resolve the plugin root from
PLUGIN_ROOT,CLAUDE_PLUGIN_ROOT,CURSOR_PLUGIN_ROOT, or the installed@codyswann/lisa/plugins/lisapackage. -
Run:
node "$PLUGIN_ROOT/scripts/install-remote-agent-aws.mjs" $ARGUMENTS -
Inspect every path returned by the installer. It must install
scripts/remote-agent-aws-setup.sh; for Cursor it merges.cursor/environment.json; for Copilot it creates or merges.github/workflows/copilot-setup-steps.yml; and it always writesdocs/remote-agent-aws.md. -
Run
bash -n scripts/remote-agent-aws-setup.sh. -
Never write or request the actual bootstrap SecretString in repository files. Tell the operator to retrieve the
remote-agent-credentialssecret from the shared AWS account and paste its complete SecretString into the platform secret namedLISA_AWS_BOOTSTRAP_JSON. The default cdkstarter secret name isremote-agent-credentials; downstream infrastructure may configure a different name. Pass that name with--secret-nameso the generated runbook contains the exact retrieval command. -
Report the external step that remains: configure that one secret in the remote environment and launch a smoke session.
Contract
A future coding agent is supported without an AWS change when its remote
environment provides a Linux shell, a setup/start hook, one opaque secret,
a writable home directory, and HTTPS access to AWS STS plus the allowed service
endpoints. Set LISA_REMOTE_AGENT to a stable lowercase platform label; it is
used only as role_session_name.
Do not create per-repository or per-agent IAM users. Do not expose the bootstrap
key through standard AWS_ACCESS_KEY_ID variables. Do not add production repair
permissions; production repair is a human-driven local-workstation workflow.
Related Skills
codyswanngt/lisa-setup-sonar
tools
VerifiedTrustedCommunity
Configure the official SonarQube plugin + MCP as Lisa's single Sonar substrate across every supported coding agent. Installs/updates the SonarQube CLI, authenticates (browser login on a dev machine, or SONARQUBE_CLI_TOKEN headless), selects the Test Manager target, runs `sonar integrate <agent>` for each supported agent (Claude, Codex, Cursor, Copilot, Antigravity) and wires the MCP for OpenCode, then writes only non-secret policy to .lisa.config.json. Separate from the CI SonarCloud scan gate, which is unchanged.
1SKILL.mdUpdated Jul 24, 2026
codyswanngt/lisa-setup-sonar
tools
VerifiedTrustedCommunity
Configure the official SonarQube plugin + MCP as Lisa's single Sonar substrate across every supported coding agent. Installs/updates the SonarQube CLI, authenticates (browser login on a dev machine, or SONARQUBE_CLI_TOKEN headless), selects the Test Manager target, runs `sonar integrate <agent>` for each supported agent (Claude, Codex, Cursor, Copilot, Antigravity) and wires the MCP for OpenCode, then writes only non-secret policy to .lisa.config.json. Separate from the CI SonarCloud scan gate, which is unchanged.
1SKILL.mdUpdated Jul 24, 2026
codyswanngt/lisa-setup-sonar
tools
VerifiedTrustedCommunity
Configure the official SonarQube plugin + MCP as Lisa's single Sonar substrate across every supported coding agent. Installs/updates the SonarQube CLI, authenticates (browser login on a dev machine, or SONARQUBE_CLI_TOKEN headless), selects the Test Manager target, runs `sonar integrate <agent>` for each supported agent (Claude, Codex, Cursor, Copilot, Antigravity) and wires the MCP for OpenCode, then writes only non-secret policy to .lisa.config.json. Separate from the CI SonarCloud scan gate, which is unchanged.
1SKILL.mdUpdated Jul 24, 2026
codyswanngt/lisa-setup-sonar
tools
VerifiedTrustedCommunity
Configure the official SonarQube plugin + MCP as Lisa's single Sonar substrate across every supported coding agent. Installs/updates the SonarQube CLI, authenticates (browser login on a dev machine, or SONARQUBE_CLI_TOKEN headless), selects the Test Manager target, runs `sonar integrate <agent>` for each supported agent (Claude, Codex, Cursor, Copilot, Antigravity) and wires the MCP for OpenCode, then writes only non-secret policy to .lisa.config.json. Separate from the CI SonarCloud scan gate, which is unchanged.
1SKILL.mdUpdated Jul 24, 2026