CtrlK
BlogDocsLog inGet started
Tessl Logo

aws-networking

Routes AWS networking requests to the correct service skill for implementation. Covers Route 53 (DNS, health checks, routing policies, Resolver, DNS Firewall), CloudFront (caching, edge, OAC, mTLS, signed URLs), Transit Gateway (multi-VPC hub, segmentation, centralized egress), Direct Connect (hybrid link, DX Gateway, MACsec), Site-to-Site VPN (IPsec tunnels, static or BGP), WAF (web ACLs, AWS Managed Rules, rate-based rules, Bot and Fraud Control), and Shield Advanced (L3/L4 DDoS). Applicable when creating, configuring, troubleshooting, or designing across these services, choosing between them, or diagnosing connectivity or traffic-filtering issues. Not for VPC subnets and route tables, load balancers, VPC endpoints, PrivateLink, API Gateway, IAM policy logic, container or serverless networking, or IaC authoring.

72

Quality

88%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Passed

No findings from the security scan

SKILL.md
Quality
Evals
Security

Quality

Content

77%

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body is a well-structured, highly actionable router with clear sequencing and a concrete retrieval path. It loses points on conciseness (repeated 'target skill implements it' phrasing and embedded implementation detail) and progressive disclosure (everything inline, no file split despite exceeding the simple-skill line count).

Suggestions

Reduce repetition of 'the target skill implements it' / 'note that the target skill should...' — state the router-only-triages boundary once and let the table rows assume it.

Move deep implementation specifics (confused-deputy condition keys, IAM credential mechanisms, CloudTrail/SNS encryption details) out of the router into the relevant target skills, keeping only the risk-and-control summary here to tighten conciseness.

Consider extracting the Security Considerations and/or Cross-Service Concepts tables into a reference file (e.g. references/SECURITY.md) referenced one level deep, so the SKILL.md overview stays lean and practices progressive disclosure.

DimensionReasoningScore

Conciseness

The body is information-dense and avoids explaining basics Claude already knows, but it repeats 'the target skill implements it' / 'note that the target skill should...' across step 5 and the Security Considerations table, and embeds deep implementation specifics (e.g. 'aws:SourceArn and/or aws:SourceAccount', 'instance profiles, IRSA, task roles, sts assume-role') that arguably belong in the target skills. This fits the score-2 anchor 'mostly efficient but could be tightened' rather than score-3 'every token earns its place'.

2 / 3

Actionability

Provides concrete, executable routing guidance: a Skill Routing Table with explicit 'Choose when…' criteria, a specific retrieval command ('aws___retrieve_skill(skill_name="<skill>")') with a filesystem fallback ('skills/<skill>/SKILL.md'), and precise dependency rules (route to shieldadvanced + waf with cloudfront; confirm MACsec/IPsec). It is not score 2 because guidance is specific and copy-ready rather than abstract or pseudocode.

3 / 3

Workflow Clarity

The 7-step 'How to use this skill' is clearly sequenced with explicit decision/branch points (multi-match → Cross-Service tables; still ambiguous → ask one clarifying question; not in table → tell user unavailable). The clarifying-question step acts as a disambiguation checkpoint; destructive/batch validation loops are not applicable to a triage skill, so it is not capped at 2.

3 / 3

Progressive Disclosure

No bundle files exist (references/, scripts/, assets/ absent) and all content is inline in a single ~95-line file with well-organized sections, but the Security Considerations and Cross-Service Concepts tables are substantial content kept inline. This matches score-2 'some structure but content that should be separate is inline' rather than score-3 'content appropriately split'; the under-50-lines simple-skill exception does not apply.

2 / 3

Total

10

/

12

Passed

Description

100%

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description is specific, trigger-rich, and sharply scoped — it states what the router does, when to use it, and what is explicitly out of scope in third person. It is among the strongest descriptions in the reference set.

DimensionReasoningScore

Specificity

Lists multiple concrete capabilities across seven named services (e.g. 'DNS, health checks, routing policies, Resolver, DNS Firewall', 'OAC, mTLS, signed URLs', 'IPsec tunnels, static or BGP') and concrete verbs ('creating, configuring, troubleshooting, or designing'). This matches the score-3 anchor of multiple specific concrete actions rather than the score-2 'names domain and some actions'.

3 / 3

Completeness

Explicitly answers 'what' ('Routes AWS networking requests to the correct service skill for implementation') and 'when' ('Applicable when creating, configuring, troubleshooting, or designing...') with an explicit 'Not for...' exclusion. The explicit 'Applicable when' trigger clause means it is not capped at 2 per the missing-trigger guideline.

3 / 3

Trigger Term Quality

Covers natural terms users would say — service names (Route 53, CloudFront, WAF, Direct Connect, Site-to-Site VPN, Shield Advanced) plus activity phrases ('diagnosing connectivity or traffic-filtering issues', 'choosing between them'). It is not score 2 because common variations are well covered rather than partially missing.

3 / 3

Distinctiveness Conflict Risk

Clear niche (7 specific AWS edge/connectivity/security services) with an explicit out-of-scope list ('Not for VPC subnets and route tables, load balancers, VPC endpoints, PrivateLink, API Gateway...') making conflicts with adjacent skills unlikely. Score 2 would require residual overlap, which the exclusions remove.

3 / 3

Total

12

/

12

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

15

/

16

Passed

Repository
aws/agent-toolkit-for-aws
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.