CtrlK
BlogDocsLog inGet started
Tessl Logo

arn-infra-execute-change

This skill should be used when the user says "execute infra change", "run infra plan", "apply infrastructure change", "execute change", "arn infra execute", "deploy infra plan", "execute infrastructure plan", "run infrastructure change", "apply infra plan", "infra execute", "arn-infra-execute-change", or wants to orchestrate the phased execution of a structured infrastructure change plan, invoking agents for IaC generation, security gates, cost gates, deployment, verification, and review.

59

Quality

68%

Does it follow best practices?

Impact

No eval scenarios have been run

SecuritybySnyk

Risky

Do not use without reviewing

Fix and improve this skill with Tessl

tessl review fix ./plugins/arn-infra/skills/arn-infra-execute-change/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

47%

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

This skill defines a comprehensive infrastructure change execution orchestration workflow with excellent workflow clarity, including proper validation gates, user confirmation checkpoints, error recovery paths, and resume logic. However, it is excessively verbose — the inline agent context templates, repeated dispatch convention references, and detailed gate evaluation rules bloat the file significantly when much of this content is already referenced in external files. The actionability is moderate since it describes processes well but defers actual executable commands to reference files.

Suggestions

Move the inline agent context templates (Steps 2.2-2.7) to a reference file like `agent-invocation-templates.md` and reference it once, reducing the SKILL.md by ~40%.

Consolidate the repeated 'passing the model from `.arness/agent-models/infra.md`' boilerplate into a single note at the top of the dispatch loop section rather than repeating it four times.

Add concrete executable examples for the rollback checkpoint step (Step 2.1) — currently it says 'backup IaC state files (state pull/export)' without showing actual commands for any IaC tool.

Since dispatch-loop.md, gate-policies.md, and deploy-procedures.md are referenced but not provided in the bundle, ensure these files exist and contain the detailed logic currently duplicated inline.

DimensionReasoningScore

Conciseness

The skill is extremely verbose at ~300+ lines. It includes extensive inline context templates that could be referenced from external files, repeats the agent model dispatch convention four times with identical boilerplate, and provides detailed structured text blocks that inflate token consumption significantly. Much of this content (e.g., the full agent invocation context templates) could be in reference files.

1 / 3

Actionability

The skill provides a clear structured workflow with specific steps and agent invocations, but lacks executable code/commands. The deployment step defers to a reference file for actual commands, the IaC generation is described abstractly, and the context templates are illustrative rather than executable. Key details like how to actually backup state files or pull resource manifests are missing.

2 / 3

Workflow Clarity

The 7-step dispatch loop is clearly sequenced with explicit validation checkpoints at each gate (security, cost, verification, review). There are well-defined feedback loops for error recovery (fix-and-retry, rollback, abort options), environment promotion gates requiring explicit user approval, and resume-from-interruption logic. The error handling section is comprehensive with specific recovery paths for each failure mode.

3 / 3

Progressive Disclosure

The skill references several external files (dispatch-loop.md, gate-policies.md, deploy-procedures.md, report templates) which is good progressive disclosure design. However, no bundle files were provided to verify these references exist, and the main SKILL.md itself is a monolithic wall of text that inlines extensive context templates and agent invocation details that should be in the referenced files. The balance between what's inline vs. referenced is poor.

2 / 3

Total

8

/

12

Passed

Description

89%

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

This description excels at trigger term coverage and completeness, providing an exhaustive list of invocation phrases and clearly stating both what the skill does and when to use it. Its main weakness is that the 'what' portion could be more specific about the concrete actions performed rather than listing sub-agent categories. The description is functional but somewhat verbose due to the long enumeration of trigger phrases.

Suggestions

Expand the capability description to list more concrete actions (e.g., 'Generates Terraform/CloudFormation code, runs security and cost validation gates, deploys changes, and verifies deployment success') rather than just naming agent types.

DimensionReasoningScore

Specificity

The description names the domain (infrastructure change execution) and lists some actions like 'IaC generation, security gates, cost gates, deployment, verification, and review,' but these are listed as sub-components rather than clearly articulated concrete actions the skill performs. The primary action is 'orchestrate the phased execution of a structured infrastructure change plan,' which is somewhat specific but reads more like a single high-level action.

2 / 3

Completeness

The description explicitly answers both 'what' (orchestrate phased execution of infrastructure change plans, invoking agents for IaC generation, security gates, cost gates, deployment, verification, and review) and 'when' (with a comprehensive list of trigger phrases and the condition 'wants to orchestrate the phased execution'). The 'when' is clearly stated upfront.

3 / 3

Trigger Term Quality

The description includes an extensive list of natural trigger phrases users would say, including variations like 'execute infra change', 'run infra plan', 'apply infrastructure change', 'deploy infra plan', and the shorthand 'arn-infra-execute-change'. This provides excellent coverage of how users might naturally invoke this skill.

3 / 3

Distinctiveness Conflict Risk

The skill is highly distinctive with very specific trigger phrases like 'arn-infra-execute-change' and a clear niche around infrastructure change plan execution with specific sub-processes (security gates, cost gates, IaC generation). It is unlikely to conflict with other skills due to its narrow, well-defined scope.

3 / 3

Total

11

/

12

Passed

Validation

90%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation10 / 11 Passed

Validation for skill structure

CriteriaDescriptionResult

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

10

/

11

Passed

Repository
AppsVortex/arness
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.