Skip to content

Recipe Extraction Agent

TypeScript agent on AWS Bedrock AgentCore

CI License: MIT Node 20+ TypeScript


Give it a URL, get back a strongly-typed Recipe JSON object. Built on Bedrock AgentCore + Strands Agents SDK, deployed to AWS with VM-level isolation and optional AI runtime security via Prisma AIRS (Strata Cloud Manager).

  • URL to Structured Data


    Point the agent at any recipe URL — it fetches the page, extracts JSON-LD and text, and returns a validated Recipe object with ingredients, steps, and notes.

  • AI Security Scanning


    Prisma AIRS (Strata Cloud Manager) scans data from external sources — prompt injection, URL categorization, agent security, DLP, and more — preventing agents from acting on untrusted data. Fail-open by default.

  • Bedrock AgentCore Runtime


    Deployed as an ARM64 Docker container with VM-level isolation, auto-scaling, and a managed Fastify server on port 8080.

  • Full Observability


    Custom CloudWatch Logs streaming from inside the container — structured JSON logs for every request, agent invocation, and security scan.

  • 100% Test Coverage


    133 tests across 6 suites with enforced coverage thresholds. Pre-commit hooks and GitHub Actions CI gate every change.

  • Automated CI/CD


    GitHub Actions with OIDC auth — push to main builds the image, pushes to ECR, and updates the AgentCore runtime automatically.


Request Flow

flowchart LR
    URL["POST /invocations<br/>{url}"] --> AIRS1["AIRS Pre-Scan"]
    AIRS1 --> Agent["Strands Agent<br/>+ fetch_url tool"]
    Agent --> Bedrock["Claude Haiku 4.5<br/>(Bedrock)"]
    Bedrock --> Parse["extractJson()<br/>+ Zod validation"]
    Parse --> AIRS2["AIRS Post-Scan"]
    AIRS2 --> Recipe["Typed Recipe JSON"]

Get Started

  • Prerequisites


    Node.js 20+, AWS credentials, and a Bedrock-enabled account.

    Prerequisites

  • Quick Start


    Install, configure, and extract your first recipe in 2 minutes.

    Quick Start

  • Configuration


    Environment variables, AIRS setup, and CloudWatch logging.

    Configuration

  • Architecture


    System design, request flow diagrams, and key design decisions.

    Architecture