aws-tenant-standup

Stand up or rebuild an AWS Shifter tenant end to end (teardown, bootstrap, secrets, image bakes, deploy via the real deploy.yml dispatch, health check, base-range smoke, and a POLARIS range walkthrough). AWS only. Use when asked to rebuild, redeploy, or stand up an AWS tenant such as proof or aws-dev from a clean state.

Quality

90%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

Securityby

Passed

No findings from the security scan

Quality

Content

88%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A dense, well-sequenced runbook for a destructive multi-phase AWS operation with strong actionability and validation checkpoints. It is slightly verbose in places and inlines some material that could live in reference files if a bundle were added.

Suggestions

Tighten narrative framing (e.g. the 'It exists so a fresh session…' opener and 'Key points learned in practice' headers) to cut tokens without losing the operational guidance.

Consider extracting the 'Known pitfalls' and 'POLARIS Bedrock requirements' sections into reference files under a references/ bundle, keeping SKILL.md as the overview plus phase pointers.

Add a short 'Prerequisites / inputs at a glance' table for profile/region/mode so the operator can confirm parameters quickly before the destructive teardown phase.

Dimension	Reasoning	Score
Conciseness	The body assumes AWS/Terraform competence and avoids explaining basics, but framing like 'It exists so a fresh session does not repeat the deploy-docs archaeology' and narrative pitfalls prose add a little that could be trimmed.	4 / 5
Actionability	Concrete, executable commands appear throughout — 'aws --profile <profile> sts get-caller-identity', 'python3 scripts/bootstrap/deploy.py bootstrap --env <env>', 'gh workflow run deploy.yml …', 'deploy_portal.sh --migrate-only', and 'cms_create_range(user, "polaris", {}, False)' — covering the common cases copy-paste ready.	5 / 5
Workflow Clarity	A clear Phase 0–8 sequence with explicit validation checkpoints (preflight secret check, health verification, base-range smoke, READY/FAILED polling) and a feedback loop (manual migrate on first-deploy failure); destructive teardown is gated by asking the operator for missing parameters first.	5 / 5
Progressive Disclosure	Sections are well-organized and authoritative repo docs are clearly signaled as 'read these first', but no bundle files exist to offload detail, so content like the known-pitfalls and POLARIS Bedrock requirements stays inline in the body.	4 / 5
	Total	18 / 20 Passed

Description

92%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong, third-person description that clearly scopes an AWS-only tenant standup skill with a concrete action list and an explicit trigger clause. Trigger-term coverage is very good but could add a couple of common synonyms to reach full comprehensiveness.

Dimension	Reasoning	Score
Specificity	Enumerates multiple concrete actions — 'teardown, bootstrap, secrets, image bakes, deploy via the real deploy.yml dispatch, health check, base-range smoke, and a POLARIS range walkthrough' — giving comprehensive coverage of what the skill does.	5 / 5
Completeness	Explicitly answers both 'what' (full end-to-end tenant standup) and 'when' via a clear 'Use when asked to rebuild, redeploy, or stand up an AWS tenant…from a clean state' clause with concrete triggers.	5 / 5
Trigger Term Quality	Natural phrases 'rebuild, redeploy, or stand up an AWS tenant such as proof or aws-dev from a clean state' map well to user requests; a few synonyms (e.g. 'set up') are absent, so it sits just below comprehensive.	4 / 5
Distinctiveness Conflict Risk	The 'AWS Shifter tenant' niche, 'AWS only' qualifier, and named tenants (proof, aws-dev) make it highly distinct with minimal overlap risk against other skills.	5 / 5
	Total	19 / 20 Passed

Validation

93%

Warnings & errors only

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 15 / 16 Passed

Validation for skill structure

Criteria	Description	Result
referenced_paths_exist	Referenced path issues: 6 missing, 4 deeper-than-1-level	Warning

	Total	15 / 16 Passed

Repository: PaloAltoNetworks/shifter
Path: .agents/skills/aws-tenant-standup/SKILL.md
Commit: c46caa4

Reviewed: 4 days ago

Table of Contents

Discovery Implementation Validation

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.