CtrlK
BlogDocsLog inGet started
Tessl Logo

signing-in-to-aws

Gets AWS credentials for CLI/SDK access via `aws login`. Activates when a developer needs to authenticate to AWS for local development, when an AWS operation fails due to missing or expired credentials, or when someone asks about setting up AWS access. Triggers: "set up AWS", "configure AWS", "aws login", "get credentials", "authenticate", "session expired", "token expired", "no credentials", "AccessDeniedException" with no configured credentials.

68

Quality

83%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Critical

Do not install without reviewing

SKILL.md
Quality
Evals
Security

Quality

Content

81%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A highly actionable, well-sequenced skill body with concrete commands and clear validation/verification checkpoints. The main weakness is repeated guidance (confirmation phrasing and the long-term-key security warning) that inflates token count without adding information.

Suggestions

Consolidate the 'ask the user before running aws login' instruction into one place and reference it, instead of restating it in both the Important block and the Confirm-and-run section.

State the long-term-access-key security tradeoff once and reuse it by reference, rather than repeating the full explanation in both the precondition checks and the Fallback section.

Consider moving the GovCloud/China, SSO, and IAM-policy edge cases into a short reference file to keep the main flow lean, since the skill exceeds the simple-skill line count.

DimensionReasoningScore

Conciseness

The body is mostly efficient, but it repeats the 'ask the user, don't tell them to run it' confirmation instruction (in both the Important block and the Confirm-and-run section) and restates the long-term-access-key security warning twice, which could be tightened.

3 / 5

Actionability

It provides fully executable, copy-paste-ready commands for every common case (`aws --version`, `aws sts get-caller-identity`, `aws login`, `aws login --profile <name>`, `aws login --remote`, `aws configure list`).

5 / 5

Workflow Clarity

The flow is explicitly sequenced (prerequisites, lead with recommendation, silent precondition checks, confirm-and-run, verify) with a concrete verify checkpoint (`aws sts get-caller-identity`) and a dedicated error-recovery section providing feedback loops.

5 / 5

Progressive Disclosure

Content is well-organized into clearly labeled sections with one-level external documentation links and no nested references, but at ~95 lines some of the conditional/error material is inlined rather than split out, leaving minor organization gaps.

4 / 5

Total

17

/

20

Passed

Description

86%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong, well-structured description that explicitly answers both what and when with a rich set of natural trigger phrases. Its only weakness is that the capability list is essentially a single action, with the rest of the text being triggers rather than distinct capabilities.

DimensionReasoningScore

Specificity

Names the AWS-credentials domain and one concrete action ('Gets AWS credentials for CLI/SDK access via `aws login`'), but the surrounding scenarios are trigger conditions rather than additional capabilities, so coverage is not comprehensive.

3 / 5

Completeness

It clearly states what the skill does ('Gets AWS credentials for CLI/SDK access via `aws login`') and explicitly when to use it via 'Activates when...' plus a concrete Triggers clause.

5 / 5

Trigger Term Quality

The explicit Triggers list covers natural user phrasings and synonyms ('set up AWS', 'configure AWS', 'get credentials', 'authenticate', 'session expired', 'token expired', 'no credentials', 'AccessDeniedException') comprehensively.

5 / 5

Distinctiveness Conflict Risk

It carves a distinct aws-login niche with specific triggers, but broad terms like 'configure AWS' and the generic 'AccessDeniedException' create minor overlap risk with other AWS skills.

4 / 5

Total

17

/

20

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository
aws/agent-toolkit-for-aws
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.