CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

operate-on-aws

Operate a live AWS workload with AWS DevOps Agent — incident investigation, root-cause analysis, and release-readiness review — for startups with no dedicated DevOps or SRE engineer. Use when a live AWS workload is misbehaving (production is down, 5xx errors, latency spike, timeouts, it broke after the last deploy, an alarm fired, a pasted CloudWatch alarm or stack trace, find the root cause, write a postmortem, no one on call), for pre-merge review (is this PR safe to ship, blast radius), or to set up, pause, stop, or check the cost of AWS DevOps Agent. Detects existing setup first and never re-onboards. Asks one explicit Yes/No covering cost (two-month trial, Activate credits) and account access before any setup; code egress stays off unless asked. Do not use for: new architecture (architect-for-startups), scaffolding (start-building-for-startups), migrations (gcp-to-aws, azure-to-aws, heroku-to-aws, llm-to-bedrock), or general Activate and credits questions (knowledge-base-for-startups).

Quality

93%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

SKILL.md
Quality
Evals
Security

Quality

Content

85%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A strongly engineered operational skill: the state machine, gated approval flow, verification steps, and exact commands/flags make it highly actionable and navigable, with procedures correctly pushed to real reference files. Its one real weakness is token economy — recurring editorial rationale and repetition of the approval rule mean the 557-line body could shed roughly 15% while preserving every directive.

Suggestions

Conciseness: convert the persuasive-rationale passages (e.g. the Datadog/PagerDuty partner paragraphs, "Telling them to wait builds more trust than a sale does", "it is the fastest way to look like you have not been paying attention") into one-line behavioral rules — keep the directive ("State the difference; never rank"), drop the justifying narrative.

Conciseness: the one-Yes/No approval rule is restated in Philosophy, the state machine section, CONFIRM, Phase 3, and Phase 4.5 — state it once in full in the state machine/CONFIRM sections and elsewhere reference it in a clause ("per the CONFIRM gate") to remove the repetition.

Conciseness: the quoted incident-timing dialogue ("Two options. Setting this up takes about ten minutes…") and the full ASSESS alert table could move into an existing reference (e.g. readiness.md or a small routing reference), keeping only the decision rows inline in the body.

DimensionReasoningScore

Conciseness

The body is fact-dense with no basic-concept padding, but it carries a recurring rhetorical register — "it is the fastest way to look like you have not been paying attention", "an AWS surface arguing against an AWS partner is a bad look for everyone in it", "Telling them to wait builds more trust than a sale does" — and restates the one-Yes/No rule across roughly five sections (Philosophy, state machine, CONFIRM, Phase 3, Phase 4.5). It could be tightened by ~15% without losing any directive, which fits "mostly efficient but includes some unnecessary explanation or could be tightened" rather than the 4 anchor's "minor instances".

3 / 5

Actionability

Fully executable guidance throughout: copy-paste commands ("aws devops-agent create-agent-space --name \"<name>\" --region <region>"), exact pricing ($0.0083/agent-second, $2.50–$4.00 per investigation), the concrete endpoint ("https://connect.aidevops.{region}.api.aws/mcp"), polling cadence ("poll get_task(task_id) every 30–45 s"), and literal capability flags ("RELEASE_READINESS_REVIEW_AUTOMATED_TESTING={enabled=false}"). The common cases are covered specifically.

5 / 5

Workflow Clarity

A state machine diagram plus a phase table with goals and exit conditions gives an unambiguous sequence, with a hard gate ("CONFIRM always comes before SET UP"), explicit validation ("Verify with tools/list or list_agent_spaces before declaring success"), error recovery ("AccessDeniedException means an IAM gap on aidevops:*"), and rollback rules ("Stop and roll back what this setup created. Never touch anything that existed before it"). Setup writes are destructive-capable but validation/approval checkpoints are pervasive, so no cap applies.

5 / 5

Progressive Disclosure

The body is an overview/state machine that routes to seven real, one-level-deep reference files, each linked inline with its purpose stated and summarized in a closing "Files in this skill" table; procedures are correctly split out (connecting, release review, credits, stopping, runbook). All referenced paths exist on disk and references do not nest further (only two sibling cross-links), matching the 5 anchor's clear overview with well-signaled one-level-deep references.

5 / 5

Total

18

/

20

Passed

Description

100%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

An exemplary description: concrete capability list, an explicit Use-when clause packed with natural user phrasings, behavioral guarantees stated in third person, and an exclusion list naming adjacent skills. Its only debatable trait is length, but every clause is load-bearing for triggering or routing rather than padded, so no dimension is reduced.

DimensionReasoningScore

Specificity

The description lists multiple concrete actions covering the product's full surface — "incident investigation, root-cause analysis, and release-readiness review", plus "to set up, pause, stop, or check the cost of AWS DevOps Agent" — in consistent third-person voice ("Detects existing setup first and never re-onboards", "Asks one explicit Yes/No"). Coverage is comprehensive within the niche rather than having minor gaps, so it matches the 5 anchor over the 4.

5 / 5

Completeness

Both halves are explicit and concrete: the "what" ("Operate a live AWS workload with AWS DevOps Agent — incident investigation, root-cause analysis, and release-readiness review") is followed by an explicit "Use when" clause with concrete trigger phrases, and further disambiguated by a "Do not use for" exclusion list. This matches the 5 anchor (clear what AND when with concrete trigger phrases).

5 / 5

Trigger Term Quality

It enumerates natural phrases a user would actually say during the triggering situations: "production is down, 5xx errors, latency spike, timeouts, it broke after the last deploy, an alarm fired, a pasted CloudWatch alarm or stack trace, find the root cause, write a postmortem, no one on call" and "is this PR safe to ship, blast radius" — comprehensive coverage with synonyms and colloquial forms. No relevant natural term for this domain is missing.

5 / 5

Distinctiveness Conflict Risk

It carves a clear niche (operating a live AWS workload) and explicitly names the sibling skills it must not collide with — "new architecture (architect-for-startups), scaffolding (start-building-for-startups), migrations (gcp-to-aws, azure-to-aws, heroku-to-aws, llm-to-bedrock), or general Activate and credits questions (knowledge-base-for-startups)" — giving minimal conflict risk, matching the 5 anchor.

5 / 5

Total

20

/

20

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

skill_md_line_count

SKILL.md is long (558 lines); consider splitting into references/ and linking

Warning

Total

15

/

16

Passed

Repository

aws/agent-toolkit-for-aws

Path

plugins/aws-startup-advisor/skills/operate-on-aws/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.