CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

directconnect

Configures AWS Direct Connect: choosing a connection model (dedicated, hosted, or a link aggregation group) and completing the cross connect; creating private, public, and transit virtual interfaces and bringing up BGP; reaching many VPCs through a Direct Connect gateway including cross-account transit gateway associations; encrypting traffic with MACsec or a private IP Site-to-Site VPN; making the connection resilient and tuning failover; managing link aggregation groups; SiteLink; and migrating from a virtual private gateway to a transit gateway. Use when the user wants a private, consistent network link between a data center and AWS, or operates an existing Direct Connect setup and needs to extend, encrypt, or harden it. Routes to the right per-task procedure in references. Do NOT use for transit gateway route tables and attachments (transitgateway skill), Site-to-Site VPN without Direct Connect (sitetositevpn skill), or Route 53 DNS routing (route53 skill).

Quality

87%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

SKILL.md
Quality
Evals
Security

Quality

Content

78%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A well-structured router skill: the body adds genuinely non-obvious domain constraints and routing logic rather than restating AWS documentation, and delegates procedures to eight real, self-contained reference files organized one level deep. The main improvement areas are trimming the description-duplicating overview paragraph, adding one concrete command/tool invocation example, and surfacing at least one inline validation checkpoint.

Suggestions

Trim the first Overview paragraph, which repeats the frontmatter description nearly verbatim — the routing table and routing notes already establish scope.

Add one short example of the execution model (e.g., an 'aws directconnect describe-connections --region <region>' line or the equivalent MCP tool invocation) so the MCP-first/CLI-fallback instruction is copy-paste ready.

Surface one explicit validation checkpoint in the body (e.g., 'verify the virtual interface state is available and BGP is established before handing the connection back to the customer') so the router workflow itself contains a verification step rather than delegating all of them to the references.

DimensionReasoningScore

Conciseness

The body is dense with non-obvious domain constraints Claude would not already know ('port speed cannot change after the connection is created', 'virtual interface type... is fixed at creation', 'Direct Connect is not encrypted in transit by default') rather than padded explanation. It falls short of anchor 5 because the first Overview paragraph restates the frontmatter description almost verbatim, and the routing-notes bullets occasionally restate content ('a distinction customers confuse constantly') that could be trimmed.

4 / 5

Actionability

As an instruction-only router, the guidance is concrete: a complete goal-to-reference table, the directive 'Read the matching reference in full before acting', execution instructions ('pass the customer's working --region on aws directconnect commands'), and a specific ARN scoping example ('arn:aws:directconnect:*:*:dxcon/{connection_id}'). It stops short of anchor 5 because no example command or MCP tool invocation form is shown, so the execution model is described rather than copy-paste ready.

4 / 5

Workflow Clarity

The router workflow is clearly sequenced: identify the task in the table, read the matching reference in full, then follow its constraints, with ordering rules stated explicitly ('Connection model comes first', the virtual interface reference 'is the required next step', migration is 'order-dependent'). It does not reach anchor 5 because validation checkpoints are delegated to the reference files rather than stated here — though the spot-checked references do carry their own Procedure and Troubleshooting sections with error handling.

4 / 5

Progressive Disclosure

This is a model router structure: a concise SKILL.md overview with a goal-to-reference table where all eight linked reference files exist, are one level deep, and are described as self-contained ('each carries its own decision tables, constraints, procedure, and troubleshooting') — verified by spot-checking the bundle. Navigation is easy and every reference is clearly signaled, matching the anchor for clear overview with well-signaled one-level-deep references.

5 / 5

Total

17

/

20

Passed

Description

92%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

An excellent description: it comprehensively and concretely enumerates the skill's capabilities, provides an explicit 'Use when' trigger with both greenfield and existing-setup scenarios, and explicitly excludes three adjacent skills to prevent mis-triggering. The only minor gap is that common practitioner abbreviations (DX, VIF, IPsec) are not included as trigger synonyms.

DimensionReasoningScore

Specificity

The description enumerates concrete, comprehensive capabilities: 'choosing a connection model (dedicated, hosted, or a link aggregation group) and completing the cross connect', 'creating private, public, and transit virtual interfaces and bringing up BGP', 'encrypting traffic with MACsec or a private IP Site-to-Site VPN', plus resiliency tuning, LAG management, SiteLink, and VGW-to-TGW migration. This matches the anchor for multiple specific concrete actions with comprehensive coverage; score 4 ('several specific actions; minor gaps') is too low given the breadth enumerated.

5 / 5

Completeness

It explicitly answers both questions: 'what' via the enumerated capability list and 'when' via the concrete trigger clause 'Use when the user wants a private, consistent network link between a data center and AWS, or operates an existing Direct Connect setup and needs to extend, encrypt, or harden it', further reinforced by explicit negative triggers ('Do NOT use for transit gateway route tables...'). This matches the anchor for clearly and explicitly answering both what and when with concrete trigger phrases.

5 / 5

Trigger Term Quality

Strong natural terms users would say: 'Direct Connect', 'private, consistent network link between a data center and AWS', 'cross connect', 'virtual interfaces', 'BGP', 'MACsec', 'Site-to-Site VPN', 'transit gateway'. It falls short of anchor 5 because common practitioner synonyms and abbreviations like 'DX', 'VIF', or 'IPsec' are absent, though coverage is otherwise good.

4 / 5

Distinctiveness Conflict Risk

It carves out a clear niche (AWS Direct Connect) and actively de-conflicts adjacent skills by name: 'Do NOT use for transit gateway route tables and attachments (transitgateway skill), Site-to-Site VPN without Direct Connect (sitetositevpn skill), or Route 53 DNS routing (route53 skill)'. This is the anchor-5 case of a clear niche with distinct triggers and minimal conflict risk; anchor 4 ('minor overlap risk') understates the explicit boundary marking.

5 / 5

Total

19

/

20

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

15

/

16

Passed

Repository

aws/agent-toolkit-for-aws

Path

skills/specialized-skills/networking-and-content-delivery-skills/directconnect/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.