Creates Pulumi infrastructure-as-code projects in Python, defines cloud resources (AWS, Azure, GCP), configures ESC environments for secrets management, and sets up OIDC authentication for secure deployments. Use when creating Pulumi Python projects, writing infrastructure code, configuring cloud providers, managing secrets with Pulumi ESC, setting up OIDC for Pulumi, or automating infrastructure deployments with Python.
100
Does it follow best practices?
Validation for skill structure
Multi-language component authoring
PulumiPlugin.yaml exists
0%
100%
PulumiPlugin.yaml runtime
0%
100%
component_provider_host entry point
0%
100%
Args Input type hints
100%
100%
Optional Input type hints
100%
100%
Typed args constructor parameter
100%
100%
parent=self for child resources
100%
100%
register_outputs called
100%
100%
Environment and ManagedBy tags
50%
100%
Dict literals for nested config
0%
100%
Outputs exported
100%
100%
Without context: $0.3631 · 1m 36s · 17 turns · 22 in / 6,485 out tokens
With context: $0.4697 · 1m 22s · 22 turns · 27 in / 4,474 out tokens
ESC environment and OIDC credential setup
OIDC login provider
100%
100%
OIDC roleArn present
100%
100%
Secrets Manager integration
100%
100%
environmentVariables block
100%
100%
pulumiConfig block
100%
100%
No hardcoded credentials in __main__.py
100%
100%
pulumi env open in runbook
100%
100%
pulumi env run for preview
0%
100%
pulumi env run for deploy
0%
100%
ESC environment linked in Pulumi.yaml or via config
100%
100%
No static credentials
100%
100%
Without context: $0.3392 · 1m 27s · 20 turns · 26 in / 4,467 out tokens
With context: $0.4939 · 1m 22s · 23 turns · 1,943 in / 4,740 out tokens
Production stack setup with transformations and toolchain config
uv toolchain in Pulumi.yaml
100%
100%
Type checker configured
100%
100%
Stack transformation for tags
100%
100%
Environment tag via transformation
50%
100%
ManagedBy Pulumi tag
60%
100%
protect=True on RDS instance
100%
100%
StackReference for networking
100%
100%
Config for db_password secret
100%
100%
No hardcoded environment values
37%
87%
Four-step workflow in deploy.md
50%
80%
preview before up in deploy.md
100%
100%
Without context: $0.3738 · 1m 36s · 22 turns · 29 in / 5,511 out tokens
With context: $0.6724 · 1m 49s · 28 turns · 3,294 in / 6,218 out tokens
Table of Contents
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.