CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

aws-lambda-microvms

Builds, runs, debugs, and operates applications on AWS Lambda MicroVMs — Firecracker-isolated, snapshot-resumable serverless compute environments running inside a container with up to 8 hr lifetimes. Applicable when workloads need strong isolation between tenants, isolated serverless compute, sandbox compute, or secure multi-tenant execution. Also suited for AI/agent code-execution sandboxes, interactive code playgrounds and notebooks (Jupyter, REPLs, dev environments running user-supplied code), reinforcement-learning environments, multi-tenant CI executors and build runners, sessionful game or simulation servers, or isolated security scanners. Also applicable when the workload needs long-lived sessions, a real port-listening server (gRPC, WebSocket, custom TCP protocols), state preserved across periods of inactivity (suspend/resume), container-level access (FUSE, eBPF, custom syscalls), or session-affine routing.

Quality

92%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

SKILL.md
Quality
Evals
Security

Quality

Content

86%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A strong operational skill body: copy-paste-ready CLI guidance, a well-sequenced workflow with pre-flight checks and validation hooks, and exemplary one-level-deep reference structure. Minor improvements are possible in conciseness (duplicated hook rationale and use-case list) and an explicit post-run verification step.

DimensionReasoningScore

Conciseness

The body is dense and factual (commands, tables, limits) with no basic-concept padding, but the "Why implement /ready? //validate?" blockquotes substantially repeat the hook table's purpose column, and the "When to use" list restates the frontmatter description nearly verbatim. Efficient overall with minor instances of over-explanation that could be trimmed, fitting the anchor between mostly-efficient (3) and lean (5).

4 / 5

Actionability

Commands are fully executable and copy-paste ready: complete `aws lambda-microvms` invocations with all flags and JSON arguments for create-microvm-image, run-microvm, token minting, curl, suspend/resume/terminate, `--additional-os-capabilities`, and a websocat shell-ingress example with subprotocol headers. The common cases are covered with concrete placeholders.

5 / 5

Workflow Clarity

The numbered 0–6 "Typical workflow" is clearly sequenced with a pre-flight regional-availability check and platform-driven validation hooks (/ready, /validate) that give error signals (503 until ready). Anchor 5 is not fully met because there is no explicit post-run verification step (e.g., confirm the endpoint serves traffic) and error recovery is delegated to references/troubleshooting.md rather than an inline feedback loop; anchor 3 is too low given the checkpoints that are present.

4 / 5

Progressive Disclosure

The body is a genuine overview with a task-mapped reference index ("Pick the reference that matches your task"), all six referenced files exist in references/, and spot-checks confirm the references are one level deep with no nested "see X for the actual instructions" chains. Content is appropriately split between overview and references, making navigation easy.

5 / 5

Total

18

/

20

Passed

Description

96%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

An excellent description: concrete third-person capability statement, explicit and multi-faceted "use when" triggers covering natural synonyms across many workload types, and a clearly distinguishable service niche. The only weakness is that a few broad isolation/sandbox trigger phrases could collide with adjacent container-sandbox skills.

DimensionReasoningScore

Specificity

"Builds, runs, debugs, and operates applications on AWS Lambda MicroVMs" lists multiple concrete actions, reinforced by concrete environment facts ("Firecracker-isolated, snapshot-resumable serverless compute environments running inside a container with up to 8 hr lifetimes"). This matches the anchor for comprehensive, specific concrete actions; nothing is vague or generic.

5 / 5

Completeness

The first sentence explicitly answers "what" (builds, runs, debugs, operates apps on Lambda MicroVMs), and explicit trigger clauses answer "when": "Applicable when workloads need strong isolation between tenants…", "Also suited for…", "Also applicable when the workload needs long-lived sessions…". Both what and when are concrete and explicit.

5 / 5

Trigger Term Quality

Natural user phrases are comprehensively covered: "sandbox compute", "AI/agent code-execution sandboxes", "Jupyter, REPLs", "interactive code playgrounds and notebooks", "CI executors and build runners", "game or simulation servers", "gRPC, WebSocket", "security scanners". File extensions are not applicable to a cloud service, and synonym coverage across use cases is thorough.

5 / 5

Distinctiveness Conflict Risk

The niche is clear (Firecracker-isolated, snapshot-resumable serverless compute) and triggers are mostly distinct, but broad phrases like "sandbox compute", "secure multi-tenant execution", and "strong isolation between tenants" overlap with adjacent container/sandbox (e.g., ECS, Docker) skills. Mostly distinct with minor overlap risk against closely related skills, fitting the anchor one level below the top.

4 / 5

Total

19

/

20

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

15

/

16

Passed

Repository

aws/agent-toolkit-for-aws

Path

skills/specialized-skills/serverless-skills/aws-lambda-microvms/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.