provision-cloud-agent

An agent skill by freeflow-community, from freeflow-community/cloud-agents. Tags: automation, cloud, developer-tools, devops, github, slack.

What it does

Provision an always-on cloud-hosted coding agent: pick a host platform (Railway or AWS EC2; pluggable for Fly.io, …), deploy a dev machine image with durable storage, install a coding agent (Claude Code, Codex, or OpenCode), wire it to a control plane (Flow or Bizzybot/Slack), give it GitHub access and the current repo, sync selected env vars from the local machine, and hand it a bootstrap task. Use when asked to "provision a cloud agent", "run an agent in the cloud", "set up a devbox agent", or similar.

Install

With the skills CLI, which installs into Claude Code, Codex, Cursor and other agents:

npx skills add freeflow-community/cloud-agents --skill provision-cloud-agent

Or copy the skill folder into Claude Code's skills directory by hand (~/.claude/skills for every project, or .claude/skills inside one):

git clone --depth 1 https://github.com/freeflow-community/cloud-agents
cp -r cloud-agents/skills/provision-cloud-agent ~/.claude/skills/provision-cloud-agent

Safety box score

Grade F, high risk: 96 of 100 risk points, rated 2026-09-20. The grade rates what the skill and its scripts can reach on the machine of whoever installs it, across eight categories from shell execution to secrets access. How the score works.

This skill provisions and manages always-on cloud coding agents on AWS or Railway, installs control-plane software, syncs selected local env vars, and wires in GitHub and browser access. The main risks are broad cloud/account reach, persistent secret handling, system-level changes, and runtime fetching/execution of third-party code.

Category levels, from 0 (none) to 3 (high)
Category	Level	Why
Code & shell execution	3 (high)	It repeatedly runs shell commands and evaluates remote installers, e.g. `curl -fsSL https://deb.nodesource.com/setup_22.x \| bash -`, `npm install -g --prefix /workspaces/.npm-global ...`, and control-plane commands like `claude -p` / `flow-agent-bridge`.
Network access	3 (high)	It talks to many remote services and can send local values off-machine, including AWS, Railway, GitHub, Slack/Central-Dispatch, package registries, and the optional EKS/DB add-on in `references/access/eks-readonly-and-db.md`.
Filesystem reach	3 (high)	It writes system and home paths such as `/etc/profile.d/agent-env.sh`, `/etc/systemd/system/agent.service`, `/home/codespace/.bashrc`, `/workspaces/env/agent.env`, and the company manifest repo, plus copies auth files like `~/.codex/auth.json`.
Secrets & credentials	3 (high)	It explicitly handles high-value credentials and auth artifacts (`GH_TOKEN`, `REGISTRATION_TOKEN`, `ANTHROPIC_API_KEY`, `OPENAI_API_KEY`, `CLAUDE_CODE_OAUTH_TOKEN`, SSH/deploy keys, `~/.codex/auth.json`) and stores them on the box.
Privilege & persistence	3 (high)	It requires system-level changes and service control (`apt-get`, `systemctl`, `sudo`, global npm installs, `chown`, shell startup edits), and Railway runs containers as root before dropping privileges.
Instruction hijack surface	3 (high)	The control-plane setup intentionally disables normal approval gates, e.g. `CLAUDE_PERMISSION_MODE=bypassPermissions` and the Claude docs' `--dangerously-skip-permissions` warning, so the agent is meant to act with reduced confirmation checks.
Irreversible actions	3 (high)	Its purpose is to create, configure, and keep alive cloud agents, register them with control planes, sync env vars, and hand off bootstrap work; it also includes lifecycle actions like AWS instance termination in the host docs.
Transparency	2 (moderate)	Several actions depend on code fetched at runtime or latest registry content, including `curl ... \| bash` and `npx -y chrome-devtools-mcp@latest`, so a reviewer cannot fully inspect what will run ahead of time.

Before installing

Read `references/hosts/aws.md` or `references/hosts/railway.md` and confirm you want an always-on box/service with persistent storage.
Decide exactly which secrets may be copied into `/workspaces/env/agent.env` and which env vars may be synced from your local machine.
Check the control-plane choice (`references/control-planes/flow.md` or `bizzybot.md`) and accept its permission-bypass / messaging model.
Be comfortable with system-level package installs and remote-fetched tooling (`apt`, `npm`, `npx`, `curl | bash`) on the target host.

Rated 2026-09-20 by an automated review of 13 files from the skill's repository.

Source

Repository: freeflow-community/cloud-agents (all skills from this repository)
Path: skills/provision-cloud-agent/SKILL.md
Branch: main
Updated: 2026-09-19

devcontainer-setup — Creates devcontainers with Claude Code, language-specific tooling (Python/Node/Rust/Go), and persistent volumes.
agents-deploy — Use when deploying your agent to AWS, or when a deploy has failed.
aws-deployment — Configures CI/CD pipelines using AWS CodePipeline, CodeBuild, CodeDeploy, CodeConnections, and CodeArtifact.
github-triage — Triages a repository's open GitHub issues and pull requests via the gh CLI.
pr-improver — Runs an autonomous review-and-fix improvement loop over the current branch's changes until a PR review comes back clean.
atlassian-mcp — Integrates with Atlassian products to manage project tracking and documentation via MCP protocol.