CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

aws-cloudformation-iam

Provides AWS CloudFormation patterns for IAM users, roles, policies, and managed policies. Use when creating IAM resources with CloudFormation, implementing least privilege access, configuring cross-account access, setting up identity centers, managing permissions boundaries, and organizing template structure with Parameters, Outputs, Mappings, Conditions for secure infrastructure deployments.

59

Quality

74%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./plugins/developer-kit-aws/skills/aws-cloudformation/aws-cloudformation-iam/SKILL.md

The canonical home for this skill is giuseppe-trisciuoglio/developer-kit

SKILL.md
Quality
Evals
Security

Quality

Content

50%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body is rich with concrete, actionable CloudFormation IAM examples but is far too long, inlining reference-grade material that already lives in bundled files, and its workflow lacks the validation checkpoints required for risky IAM operations.

Suggestions

Move most inline full templates (per-service roles, base template, SCP, SSO) into references/examples.md and references/reference.md, keeping only a representative quick-start example in SKILL.md.

Add explicit validation checkpoints to the Instructions workflow — e.g. 'validate template with aws cloudformation validate-template', create-change-set preview, and drift detection before/after applying IAM changes.

Ensure inline templates are self-contained by either declaring all referenced Parameters/Mappings or noting which must be supplied, so examples are copy-paste runnable.

DimensionReasoningScore

Conciseness

The ~1690-line body inlines many full templates (base template, multiple per-service roles, parameters, SCP, SSO) that duplicate material in the dedicated references files, making it noticeably padded despite no concept-level fluff.

2 / 5

Actionability

Provides many concrete, mostly executable YAML templates and CLI commands; minor gaps because several templates reference undeclared parameters (e.g. !Ref Environment, ProjectName, ExternalId) making them not fully copy-paste-runnable standalone.

4 / 5

Workflow Clarity

The 'Instructions' section lists 8 sequenced steps but has no validation checkpoints, and IAM/destructive infrastructure operations require validation — per the rubric cap this cannot score above 3 even though a sequence exists.

3 / 5

Progressive Disclosure

References to references/examples.md and references/reference.md are clearly signaled (top and bottom) and the files exist, but a large volume of content that belongs in those separate files is inlined directly in SKILL.md.

3 / 5

Total

12

/

20

Passed

Description

88%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong, mostly well-targeted description that clearly states what the skill does and when to use it with concrete trigger phrases. It is slightly overstuffed with technical jargon, which keeps trigger-term quality and distinctiveness just below the top anchor.

DimensionReasoningScore

Specificity

Lists multiple concrete actions across the domain — 'users, roles, policies, and managed policies', 'implementing least privilege access', 'configuring cross-account access', 'managing permissions boundaries' — giving comprehensive coverage rather than vague abstractions.

5 / 5

Completeness

Explicitly answers both: 'Provides AWS CloudFormation patterns for IAM users, roles, policies...' (what) and 'Use when creating IAM resources with CloudFormation, implementing least privilege access...' (when) with concrete trigger phrases.

5 / 5

Trigger Term Quality

Good keyword coverage with natural phrases users say ('IAM resources', 'cross-account access', 'permissions boundaries', 'least privilege'), though it is somewhat stuffed with jargon ('Parameters, Outputs, Mappings, Conditions') and lacks common synonym variations.

4 / 5

Distinctiveness Conflict Risk

Clear niche (CloudFormation IAM patterns) with distinct triggers, but carries minor overlap risk with a generic CloudFormation or IAM skill given the breadth of listed topics.

4 / 5

Total

18

/

20

Passed

Validation

87%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 14 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

skill_md_line_count

SKILL.md is long (1697 lines); consider splitting into references/ and linking

Warning

allowed_tools_field

'allowed-tools' contains unusual tool name(s)

Warning

Total

14

/

16

Passed

Repository

fernandezbaptiste/developer-kit

Path

plugins/developer-kit-aws/skills/aws-cloudformation/aws-cloudformation-iam/SKILL.md

Revision

810297c

Reviewed

Table of Contents

DiscoveryImplementationValidation

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.

Claim skill