CtrlK
BlogDocsLog inGet started
Tessl Logo

sitetositevpn

Configures AWS Site-to-Site VPN: creating an IPsec VPN connection between an on-premises network and a VPC, choosing the target gateway (virtual private gateway, transit gateway, or AWS Cloud WAN), choosing static or dynamic (BGP) routing, sizing tunnel bandwidth (Standard 1.25 Gbps or Large 5 Gbps), connecting many sites through a VPN Concentrator, applying the customer gateway device configuration, making a connection highly available, and monitoring tunnels with CloudWatch. Applicable when the user wants to connect a data center or branch office to AWS over an encrypted tunnel, choose how routes are exchanged, scale throughput, consolidate sites, or diagnose a down tunnel. Routes to the right per-task procedure in references. Not for AWS Direct Connect (its own service), Client VPN for individual remote users, the transit gateway side of a VPN attachment (transitgateway skill), or Route 53 DNS work.

79

Quality

100%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Passed

No findings from the security scan

SKILL.md
Quality
Evals
Security

Quality

Content

100%

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body is a well-structured router: concise, actionable, with clear task sequencing and clean one-level-deep progressive disclosure to verified reference files. It avoids concept re-explanation and lets the references carry the detailed procedures and validation.

DimensionReasoningScore

Conciseness

The 76-line body is a lean router that points to per-task references and adds only non-obvious decision guidance (e.g. "A transit gateway... is the only target that supports Large (5 Gbps) tunnels, ECMP... and the VPN Concentrator"); it does not explain concepts Claude already knows, so it clears the 'lean and efficient' bar rather than the score-2 'could be tightened' bar.

3 / 3

Actionability

Concrete executable guidance is present—"Execute commands using the AWS MCP server when connected... Fall back to the AWS CLI otherwise", "pass `--region {region}`"—plus a copy-paste-ready goal-to-reference table; as an instruction/router skill the absence of inline code is not penalized because the navigation and execution direction is fully actionable.

3 / 3

Workflow Clarity

Sequencing is explicit—"Read the matching reference in full before acting, then follow its constraints and steps"—and the routing notes enforce order ("Decide routing before you build", "The target gateway gates almost everything"), while the references themselves carry validation checkpoints ("You MUST confirm...", "Verify dependencies"), matching the clear-sequence-with-validation anchor.

3 / 3

Progressive Disclosure

A clear overview table signals one-level-deep references to seven real, verified files under references/, with no nested reference chaining and content appropriately split per task, matching the 'clear overview with well-signaled one-level-deep references' anchor rather than the score-2 'could be better organized' bar.

3 / 3

Total

12

/

12

Passed

Description

100%

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description is specific, uses natural third-person trigger language, explicitly states both what it does and when to use it, and sharply distinguishes itself from adjacent skills. It is a strong, low-conflict trigger description.

DimensionReasoningScore

Specificity

Lists multiple concrete actions—"creating an IPsec VPN connection", "choosing the target gateway", "sizing tunnel bandwidth", "connecting many sites through a VPN Concentrator", "monitoring tunnels with CloudWatch"—matching the 'lists multiple specific concrete actions' anchor rather than the score-2 partial coverage.

3 / 3

Completeness

Explicitly answers both what (the full capability list) and when via "Applicable when the user wants to connect a data center or branch office... choose how routes are exchanged, scale throughput, consolidate sites, or diagnose a down tunnel", satisfying the explicit-trigger requirement that would otherwise cap this at 2.

3 / 3

Trigger Term Quality

Natural phrasing users would actually say appears throughout—"connect a data center or branch office to AWS over an encrypted tunnel", "BGP", "diagnose a down tunnel", "scale throughput"—with good coverage of common variations rather than only jargon.

3 / 3

Distinctiveness Conflict Risk

A clear "Not for AWS Direct Connect... Client VPN... the transit gateway side... (transitgateway skill), or Route 53 DNS work" clause carves out a distinct niche, making wrong-skill triggering unlikely rather than merely 'somewhat specific'.

3 / 3

Total

12

/

12

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

15

/

16

Passed

Repository
aws/agent-toolkit-for-aws
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.