CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

migrate-to-msk

Helps migrate self-managed Apache Kafka workloads to Amazon MSK Express. Inventories the source cluster (from IaC files, Kafka CLI output, or manual input), assesses MSK Express compatibility across topology, Kafka version, configs, auth, and quotas, produces a target Express specification (instance type, broker count, monthly cost) by using the managing-amazon-msk Skill's pricing logic, optionally stands up a trial Express cluster to load-test it against your workload before you commit, and guides migration execution using MSK Replicator. Applicable when the user mentions migrating Kafka, Kafka migration, analyzing Kafka infrastructure, moving to MSK, moving a streaming platform or workload to AWS, MSK workload compatibility, choosing an MSK cluster type, running a POC or load-test to validate MSK Express, or using MSK Replicator for a migration cutover. Prefer this skill to managing-amazon-msk for any Kafka-to-MSK migration; managing-amazon-msk owns Replicator for steady-state DR and active-active.

Quality

88%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Low

Low-risk findings worth noting

SKILL.md
Quality
Evals
Security

Quality

Content

78%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A well-structured orchestration skill: explicit intent routing, phased workflow with inputs, outputs, gates, and forbidden behaviors, and exemplary one-level-deep reference architecture with all linked files present. It falls short of top marks on inline executability (commands live in references), on one section of generic AWS security guidance, and on in-body error-recovery loops.

Suggestions

Trim the Security Considerations section to the migration-specific controls (EncryptionInTransit.ClientBroker = TLS, the 100 conn/sec/broker IAM limit alarm, kafka-cluster:* CloudTrail metric filters) and drop the generic AWS guidance Claude already knows (private subnets, CloudTrail enablement, secrets-not-in-CLI).

Inline the exact uv run scripts/compatibility.py invocation (a single command line) in the Phase 2 section so the assessment is executable from the body alone, keeping the per-pillar thresholds and templates in the reference.

Add an explicit recovery loop for ACTION_REQUIRED verdicts in the body (what the customer should remediate and that assessment can be re-run to clear the finding) instead of only 'surface those findings and stop'.

DimensionReasoningScore

Conciseness

The body is mostly tight, rule-driven prose ('Do NOT pivot back into discovery', 'Report broker counts and costs only as read verbatim from the sizing script output') with no concept explanations Claude already knows, but the Security Considerations section inlines generic AWS guidance — 'Deploy MSK clusters in private subnets', 'Ensure CloudTrail is enabled in the target account' — alongside genuinely domain-specific values. Not a 5 because that generic material could be trimmed or moved; not a 3 because padding is confined to one section.

4 / 5

Actionability

Highly concrete for an instruction-only skill: named scripts with execution model ('scripts/compatibility.py, a pure file processor ... run via uv run'), exact artifact paths ('migrate-to-msk-skill-artifacts/<cluster_name>/cluster-config.json'), verbatim verdict strings ('INFO, ADVISORY, or ACTION_REQUIRED'), sizing flags ('--broker-classes express' and '--region'), and named MCP tools ('aws___search_documentation', 'aws___read_documentation'). Not a 5 because no runnable command line appears inline — the exact invocations are deferred to references ('For the exact commands, see "Running the assessment"'), leaving a minor gap in copy-paste readiness.

4 / 5

Workflow Clarity

The three phases are clearly sequenced, each with Purpose/Input/Output, and there are explicit checkpoints: 'Do NOT proceed to Phase 2 without explicit customer confirmation', per-intent routing rules, independent halves ('run them in either order, and a failure in one does not block the other'), and missing-data handling ('the scripts emit ADVISORY evidence (METRICS_MISSING, AZ_COUNT_UNKNOWN, etc.) ... surface those findings and stop'). Not a 5 because error-recovery loops for ACTION_REQUIRED verdicts and the per-pillar remediation path are deferred to references rather than given as a validate→fix→retry cycle in the body; not a 3 because validation checkpoints are explicit and the operations are non-destructive (file processing plus a temporary isolated cluster).

4 / 5

Progressive Disclosure

The body is a clear routing overview that appropriately splits heavy detail into one-level-deep, well-signaled references — [references/discovery.md], [references/assessment-compatibility.md], [references/assessment-sizing.md], [references/simulation.md] — each introduced with an explicit read-before-acting directive, plus [scripts/compatibility.py], [scripts/simulation_load_test_config.py], and [assets/simulation-stack.yaml], all of which exist in the bundle. Navigation is easy and no content that belongs in a reference is inlined wholesale; matches the anchor-5 exemplar.

5 / 5

Total

17

/

20

Passed

Description

95%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong description: comprehensive concrete actions, explicit 'Applicable when...' triggers with natural synonyms, and explicit conflict resolution against the sibling managing-amazon-msk skill. The only deduction is the mandated 1-point specificity penalty for the second-person phrase 'against your workload before you commit'.

DimensionReasoningScore

Specificity

The description lists multiple concrete actions — 'Inventories the source cluster (from IaC files, Kafka CLI output, or manual input)', 'assesses MSK Express compatibility across topology, Kafka version, configs, auth, and quotas', 'produces a target Express specification (instance type, broker count, monthly cost)', 'stands up a trial Express cluster to load-test', 'guides migration execution using MSK Replicator' — which is anchor-5 coverage, but it uses second person ('load-test it against your workload before you commit'), and the rubric mandates a 1-point specificity penalty for second-person voice. Not a 3 because the action inventory is comprehensive, not merely 1-2 actions.

4 / 5

Completeness

Both halves are explicit: the 'what' is the detailed multi-action capability statement above, and the 'when' is a dedicated trigger clause — 'Applicable when the user mentions migrating Kafka, Kafka migration, ... or using MSK Replicator for a migration cutover' — plus routing guidance against the sibling skill ('Prefer this skill to managing-amazon-msk for any Kafka-to-MSK migration'). This mirrors the anchor-5 exemplar exactly; not a 4 because the 'when' clause is already fully explicit, not merely implied.

5 / 5

Trigger Term Quality

The trigger list is comprehensive with natural synonyms and phrasing users would actually say: 'migrating Kafka', 'Kafka migration', 'moving to MSK', 'moving a streaming platform or workload to AWS', 'MSK workload compatibility', 'choosing an MSK cluster type', 'running a POC or load-test', 'using MSK Replicator for a migration cutover'. Matches the anchor-5 example's synonym coverage (e.g. 'migrating Kafka' / 'Kafka migration' pair); not a 4 because no common variation is missing.

5 / 5

Distinctiveness Conflict Risk

It carves a clear niche (self-managed Apache Kafka → MSK Express) and explicitly disambiguates the closest sibling: 'Prefer this skill to managing-amazon-msk for any Kafka-to-MSK migration; managing-amazon-msk owns Replicator for steady-state DR and active-active.' Minimal conflict risk; not a 4 because the overlap case with the nearest related skill is directly resolved rather than merely reduced.

5 / 5

Total

19

/

20

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

referenced_paths_exist

Referenced path issues: 1 missing

Warning

Total

15

/

16

Passed

Repository

aws/agent-toolkit-for-aws

Path

skills/specialized-skills/analytics-skills/migrate-to-msk/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.