Skip to content

Fix stale AWS MCP tool references in agents and skills - #38

Merged
knihit merged 7 commits into
mainfrom
fix/stale-aws-mcp-tool-references
Oct 23, 2026
Merged

knihit merged 7 commits into
mainfrom
fix/stale-aws-mcp-tool-references

Conversation

@knihit

@knihit knihit commented Oct 6, 2026 •

Copy link
Copy Markdown
Contributor

Description

Agents:

  • k-architect: aws___call_aws is removed from the AWS MCP server — updated the AWS MCP guidance to point at aws___run_script, the server's documented replacement
  • k-developer: same aws___call_aws → aws___run_script update

Skills:

  • find-aws-skills: failure-handling fallback referenced aws___suggest_aws_commands, which the server no longer exposes. It now offers direct AWS API calls via aws___run_script (sandboxed Python)
  • aws-service-validator: aws___get_regional_availability now requires resource_type and filters in addition to regions — the skill called it with only a service and region, which fails with a missing-required-field error; updated the call shape and the pitfall note

Type of Change

  • Context / system prompt update
  • Modify existing skill

Testing

  • npm test passes (runs tests/scripts/**/*.test.js) — 15 pre-existing failures (all tracing to a missing scripts/brand-config/lib/constants.js) reproduce identically on unmodified origin/main; no new failures from this change
  • If cli/ changed: not applicable, no cli/ files touched
  • Smoke tested affected agent(s): not yet run interactively; the tool-removal and parameter-shape findings were confirmed live against the AWS MCP server (aws-mcp.us-east-1.api.aws/mcp)
  • If an agent's or skill's behavior changed: benchmark harness not yet run
  • New or changed code files carry the required SPDX header — not applicable, all changed files are JSON/Markdown

Checklist

  • My code follows the style guidelines of this project
  • I have performed a self-review of my own changes
  • I have commented my code where necessary
  • I have made corresponding changes to the documentation (CHANGELOG [Unreleased] entry; the version bump is left to the release PR)
  • My changes generate no new warnings: build is clean (make build succeeds); no cli/ changes, so cargo clippy/cargo fmt not applicable
  • I have added or updated tests that prove my change works — see Testing above; this is a wording/parameter-shape fix with no new testable behavior, verified against the live AWS MCP server tool catalog instead

Agents Affected

  • konductor
  • konductor-mux-orchestrator
  • konductor-cmux-orchestrator
  • k-developer
  • k-architect
  • k-researcher
  • k-product-manager
  • k-quality-assurance
  • k-tpm
  • k-browser
  • k-media-analyzer

Notes for Reviewers

Found while reviewing whether konductor's AWS skills duplicate the AWS Agent Toolkit (aws/agent-toolkit-for-aws). Three stale references turned up:

  1. aws___call_aws and aws___suggest_aws_commands return "has been removed, use another one" when called against the live server.
  2. aws___get_regional_availability rejects a call with only regions, requiring resource_type and filters as well.

Confirmed directly against the live server's tools/list and tools/call responses, not from documentation alone.

knihit added 2 commits October 6, 2026 01:04
The AWS MCP server has removed aws___call_aws, aws___recommend, and
aws___suggest_aws_commands, replacing the first and third with
aws___run_script for running AWS CLI commands. k-architect, k-developer,
and find-aws-skills still referenced the removed tools.

aws___get_regional_availability now requires resource_type and filters
parameters; aws-service-validator called it with only a service and
region, which fails with a missing-required-field error.

Confirmed live against the AWS MCP server (aws-mcp.us-east-1.api.aws/mcp)
and verified aws___run_script is the documented replacement in the
server's own tool catalog.
VERSION went to 1.0.4 in the previous commit but cli/konductor-rs's
Cargo.toml stayed at 1.0.3. The release tarball's version segment comes
from Cargo.toml (CARGO_PKG_VERSION), so this would have failed
release.yml's version-match check after merge, as validate-pr.yml's own
PR-time check caught.

Cargo.lock regenerated via 'cargo update -p konductor --precise 1.0.4'
to keep the two in sync.
Comment thread VERSION Resolved
Comment thread skills/find-aws-skills/SKILL.md Resolved
Resolve conflicts with main: keep main's VERSION and Cargo files, since the
release bump belongs to its own PR, and re-apply the two systemPrompt edits
on main's current prompts. Move the entries to [Unreleased], and describe
aws___run_script as sandboxed Python with AWS API access.
…server defines them

Only resource_type is required. filters is required for a multi-region
call, regions takes up to 10 codes, and filter values must exactly match
AWS's catalog names.
@knihit
knihit requested a review from ihmaws October 22, 2026 17:12
ihmaws
ihmaws previously approved these changes Oct 22, 2026
simonkrol
simonkrol previously approved these changes Oct 23, 2026
Comment thread skills/aws-service-validator/SKILL.md Resolved
Comment thread skills/find-aws-skills/SKILL.md Resolved
… fallback

aws-service-validator now tells the agent to follow next_token when it
lists catalog names with an unfiltered single-region call, so a partial
first page isn't read as "name not found".

find-aws-skills' confirmation rule now names the fallback it actually
offers, direct AWS API calls via aws___run_script, instead of CLI tools.
@knihit
knihit merged commit b2eb0ee into main Oct 23, 2026
6 checks passed
@knihit
knihit deleted the fix/stale-aws-mcp-tool-references branch October 23, 2026 20:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants