CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

eks-irsa

IAM Roles for Service Accounts (IRSA) for EKS pod-level AWS permissions. Use when configuring pod IAM access, setting up AWS service integrations, implementing least-privilege security, troubleshooting OIDC trust relationships, or deploying AWS controllers.

Quality

78%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./.claude/skills/eks-irsa/SKILL.md

The canonical home for this skill is eks-irsa in fernandezbaptiste/Skrillz

SKILL.md
Quality
Evals
Security

Quality

Content

63%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A highly actionable body with excellent copy-paste Terraform, verification commands, and troubleshooting coverage. Its weaknesses are padding (benefits/marketing prose, redundant SDK explanations, dated metadata) and duplication of reference-file content inline in SKILL.md rather than deferring it.

Suggestions

Cut the "Key Benefits" (Security/Compliance/Operational) bullet block, the "**Keywords**" line, and the "What is IRSA?" re-explanation — Claude already knows IRSA's value proposition and mechanism; keep only the 7-step token flow if a mechanism reminder is needed.

Collapse the three Python/Node/Go SDK examples into one with a note that all AWS SDKs auto-detect IRSA credentials, and trim the ~140-line "Common IRSA Patterns" section to 1-2 representative patterns with a pointer to references/role-creation.md, which already covers the same patterns.

Fix the Go example (missing fmt import) so every code block is copy-paste ready, and move the dated "Version/Last Updated: November 2025" footer into a deprecation/versioning note or remove it.

DimensionReasoningScore

Conciseness

The bulk is lean, dense code, but several sections pad tokens: the ~18-line "Key Benefits" marketing block, a keyword-stuffing line, the "What is IRSA?" concept re-explanation, three SDK examples that each restate "AWS SDK automatically detects IRSA credentials", and dated version metadata ("Last Updated: November 2025"). Fits anchor 3 (mostly efficient with some unnecessary explanation); not anchor 2 because the code sections are genuinely useful and non-redundant.

3 / 5

Actionability

Mostly copy-paste-ready: complete Terraform modules for 7 patterns, eksctl commands, verification commands with expected outputs, and a specific error/cause/fix troubleshooting table. Not anchor 5 due to minor gaps — the Go example won't compile as written (missing fmt import) — but well above anchor 3 since the code is executable, not pseudocode.

4 / 5

Workflow Clarity

The Quick Start lays out a clear 4-step sequence (enable IRSA → create role → annotate ServiceAccount → use in pod) and the "Verify IRSA Setup" section provides explicit checkpoints with expected env-var output, plus a troubleshooting table for error recovery. Not anchor 5 because verification is presented as a side section rather than a gated step within the flow.

4 / 5

Progressive Disclosure

The three references/ files exist, are well signaled with topic bullets, and are one level deep — but ~140 lines of the 7 "Common IRSA Patterns" plus blue/green and security content are inlined in SKILL.md while references/role-creation.md and references/oidc-setup.md cover the same topics, i.e., content that should be deferred is duplicated inline. Fits anchor 3; not anchor 4 because the duplication exceeds minor organization gaps.

3 / 5

Total

14

/

20

Passed

Description

83%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong description with a clear what, an explicit and multi-trigger when clause, and natural domain vocabulary. Its only weaknesses are a slightly terse capability statement and a couple of over-broad trigger phrases that could overlap general AWS IAM skills.

DimensionReasoningScore

Specificity

"Use when configuring pod IAM access, setting up AWS service integrations, implementing least-privilege security, troubleshooting OIDC trust relationships, or deploying AWS controllers" names several specific actions, matching anchor 4. Not anchor 3 (well more than 1-2 actions) and not anchor 5 (the terse what-statement omits capabilities like trust-policy creation and service-account annotation).

4 / 5

Completeness

A clear what ("IAM Roles for Service Accounts (IRSA) for EKS pod-level AWS permissions") is followed by an explicit "Use when..." clause with five concrete trigger phrases, exactly matching the anchor-5 exemplar pattern. Not anchor 4 since the when-guidance is fully explicit and specific.

5 / 5

Trigger Term Quality

Natural terms users would say are present ("IRSA", "EKS", "pod IAM", "OIDC trust relationships", "AWS controllers"), but a few common variations are missing (e.g., the eks.amazonaws.com/role-arn annotation, specific controller names like EBS CSI or Load Balancer Controller). Fits anchor 4: good coverage with a few natural terms missing.

4 / 5

Distinctiveness Conflict Risk

"IRSA" and "troubleshooting OIDC trust relationships" define a distinct niche with minimal conflict, but "implementing least-privilege security" and "setting up AWS service integrations" lack EKS qualifiers and could overlap a general AWS IAM skill, fitting anchor 4 (minor overlap risk) rather than anchor 5.

4 / 5

Total

17

/

20

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

skill_md_line_count

SKILL.md is long (556 lines); consider splitting into references/ and linking

Warning

Total

15

/

16

Passed

Repository

fernandezbaptiste/Skrillz

Path

.claude/skills/eks-irsa/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.