CtrlK
BlogDocsLog inGet started
Tessl Logo

aws-deployment

Configures CI/CD pipelines using AWS CodePipeline, CodeBuild, CodeDeploy, CodeConnections, and CodeArtifact. Covers CodePipeline V2 (triggers, variables, execution modes, cross-account), buildspec.yml (caching, VPC, Docker), CodeDeploy strategies (blue/green, canary, linear), CodeArtifact (private package registries, auth tokens, cross-account), and source connections (GitHub, GitLab, Bitbucket). Applies when CodePipeline, CodeBuild, CodeDeploy, CodeConnections, CodeArtifact, buildspec.yml, appspec.yml, or CI/CD pipeline orchestration is referenced. Does NOT cover: ECS Fargate services or task definitions (use aws-containers), CDK Pipelines or cdk deploy (use aws-cdk), sam deploy (use aws-serverless), Amplify deployments (use aws-amplify), or GitHub Actions/GitLab CI.

73

Quality

90%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Low

Low-risk findings worth noting

SKILL.md
Quality
Evals
Security

Quality

Content

80%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body is a lean, high-signal overview that front-loads critical operational traps and routes detail to well-organized reference files. Its main gap is workflow sequencing: deploy and cross-account workflows name the steps but do not inline the verify/proceed checkpoints that the rubric expects for destructive operations.

Suggestions

Add explicit validation checkpoints to the cross-account and deployment workflows (e.g. 'After adding RoleArn: verify the pipeline source action succeeds before promoting; on Access Denied, re-check all three of KMS policy, S3 bucket policy, and trust policy') to turn the triple-requirement warning into a sequenced validate→fix→retry loop.

In the Common Workflows table, append a verify step to each destructive row (e.g. '→ confirm deployment reaches Complete; if stuck, check MinimumHealthyHosts / target group health check') so each workflow is self-checking rather than relying on the separate Troubleshooting section.

Consider one small inline buildspec/appspec skeleton (or a pointer to a specific section of the reference file) so the most common 'write buildspec.yml' task has copy-paste-ready scaffolding without leaving SKILL.md.

DimensionReasoningScore

Conciseness

The body assumes Claude's competence — it never explains what CodePipeline/CodeBuild are — and every section delivers non-obvious operational gotchas (PENDING trap, cross-account triple requirement, ApplicationStop-uses-previous-revision) with no padding.

5 / 5

Actionability

Concrete flags and config values appear throughout ('--ignore-application-stop-failures', 'privilegedMode: true', 'file_exists_behavior: OVERWRITE', 'codeconnections:' prefix, named condition keys), but full copy-paste buildspec/appspec code blocks are deferred to the reference files rather than included inline.

4 / 5

Workflow Clarity

The Common Workflows table gives high-level sequences ('Create connection → CodeBuild Docker stage → CodeDeploy ECS blue/green') but lacks inline validation checkpoints for destructive deploy/cross-account operations; the rubric caps workflow_clarity at 3 when batch/destructive workflows omit validation steps, and recovery knowledge is scattered in Troubleshooting rather than sequenced into the workflows.

3 / 5

Progressive Disclosure

A clear overview with a Quick Navigation table pointing one level deep to six real reference files (codepipeline, codeconnections, codebuild, codeartifact, codedeploy, troubleshooting), with content appropriately split between overview/warnings in SKILL.md and detail in references.

5 / 5

Total

17

/

20

Passed

Description

100%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description is comprehensive and well-structured: it names concrete per-service capabilities, gives explicit trigger conditions, and draws clear boundaries against sibling skills. It is dense but every clause is informational rather than padded.

DimensionReasoningScore

Specificity

Lists multiple concrete capabilities per service — 'triggers, variables, execution modes, cross-account', 'buildspec.yml (caching, VPC, Docker)', 'blue/green, canary, linear', 'private package registries, auth tokens' — giving comprehensive, non-abstract coverage.

5 / 5

Completeness

Explicitly answers 'what' ('Configures CI/CD pipelines using...') and 'when' ('Applies when CodePipeline, CodeBuild... is referenced'), plus a 'Does NOT cover' boundary clause — both halves are concrete and explicit.

5 / 5

Trigger Term Quality

Covers natural user terms including service names, file extensions (buildspec.yml, appspec.yml), source providers (GitHub, GitLab, Bitbucket), and the generic phrase 'CI/CD pipeline orchestration', matching the comprehensive-synonym anchor.

5 / 5

Distinctiveness Conflict Risk

Clear AWS-CI/CD niche with an explicit 'Does NOT cover' list redirecting overlapping cases (ECS Fargate→aws-containers, CDK Pipelines→aws-cdk, sam deploy→aws-serverless, Amplify→aws-amplify), minimizing wrong-skill triggering.

5 / 5

Total

20

/

20

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository
aws/agent-toolkit-for-aws
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.