CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

aws-sdk-java-v2-secrets-manager

Provides AWS Secrets Manager patterns using AWS SDK for Java 2.x. Use when storing/retrieving secrets (passwords, API keys, tokens), rotating secrets automatically, managing database credentials, or integrating secret management into Spring Boot applications.

62

Quality

78%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./plugins/developer-kit-java/skills/aws-sdk-java-v2-secrets-manager/SKILL.md

The canonical home for this skill is giuseppe-trisciuoglio/developer-kit

SKILL.md
Quality
Evals
Security

Quality

Content

61%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body delivers largely executable, well-organized guidance for AWS Secrets Manager with Java 2.x and a sound reference structure. Main weaknesses are missing validation checkpoints for destructive/batch operations, some undefined symbols in Spring snippets, and duplicated or already-known explanatory content that inflates token cost.

Suggestions

Add explicit validation/verification steps to the workflow (e.g., 'after createSecret, call getSecretValue to confirm'; 'after rotation, verify AWSCURRENT changed before proceeding'), since destructive (deleteSecret) and batch operations currently lack feedback loops.

Tighten the body: remove the conceptual Overview paragraph, the 'When to Use' trigger restatement, and the redundant 'Instructions' outline; move the Testing Strategies and detailed Spring Boot sections into the existing reference files to reduce inline duplication.

Fix non-compiling snippets — define getSecretAsMap and the objectMapper/region members in the Spring examples, close the Gradle dependency string — and add a link to assets/templates/SecretsManagerConfigTemplate.java from the References section so bundle content is discoverable.

DimensionReasoningScore

Conciseness

The body is mostly concrete code, but includes unnecessary or duplicated material: the Overview explains what AWS Secrets Manager is ('helps you protect secrets needed to access your applications...'), the 'When to Use' section restates the frontmatter triggers, the 8-item 'Instructions' list duplicates the section structure, and Testing Strategies shows boilerplate Mockito/JUnit usage Claude already knows. This fits 'mostly efficient but includes some unnecessary explanation or could be tightened'; it is not a 2 because the bulk is executable guidance rather than padded prose.

3 / 5

Actionability

Core operations are copy-paste ready (client builder, createSecret/getSecretValue, SecretCache setup, error handling, aws CLI debug commands), matching 'mostly executable guidance with minor gaps'. It is not a 5 because several Spring snippets reference undefined members — 'getSecretAsMap(...)' is never defined, 'objectMapper' is never declared, 'region' is unresolved in the @Bean, and the Gradle dependency line is missing its closing quote — so those blocks do not compile as written.

4 / 5

Workflow Clarity

The 'Instructions' section gives a clear 8-step sequence (dependencies → client → store → retrieve → cache → rotate → Spring → monitor), but there are no validation or verification checkpoints anywhere (no 'verify the secret exists after creation', no post-rotation check). Since the skill includes destructive and batch operations (deleteSecret with its recovery window, the batch stream over multiple secrets), the rubric caps workflow clarity at 3; it is not a 2 because the sequence itself is well defined and error handling/troubleshooting sections exist.

3 / 5

Progressive Disclosure

Good structure with a sectioned overview and clearly signaled, one-level-deep references — all three linked files (api-reference.md, caching-guide.md, spring-boot-integration.md) exist and are described inline. It is not a 5 because roughly 60 lines of Spring Boot and testing content duplicated in the reference files remain inline in a ~370-line body, and the bundle file assets/templates/SecretsManagerConfigTemplate.java is never referenced from SKILL.md, leaving orphaned bundle content.

4 / 5

Total

14

/

20

Passed

Description

87%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong description that clearly states what the skill provides and when to use it, with natural trigger terms and a well-defined niche. Minor improvement is possible by adding caching/performance terms and a few more trigger synonyms to round out coverage.

DimensionReasoningScore

Specificity

The description lists several concrete actions — 'storing/retrieving secrets (passwords, API keys, tokens), rotating secrets automatically, managing database credentials, or integrating secret management into Spring Boot applications' — matching the anchor for several specific actions with minor gaps. It is not a 5 because coverage is incomplete relative to the skill body (no mention of caching, listing, or audit logging), and not a 3 because it goes well beyond 1-2 actions.

4 / 5

Completeness

It explicitly answers both questions: the what ('Provides AWS Secrets Manager patterns using AWS SDK for Java 2.x') and the when ('Use when storing/retrieving secrets... rotating secrets... managing database credentials, or integrating secret management into Spring Boot applications') with concrete trigger phrases, mirroring the anchor-5 example structure.

5 / 5

Trigger Term Quality

Good coverage of natural phrases users would say: 'secrets', 'passwords', 'API keys', 'tokens', 'rotating secrets', 'database credentials', 'Spring Boot'. It falls short of the 5 anchor because common variations like 'secret storage', 'credential management', or 'secret lookup/retrieval' phrasing are absent.

4 / 5

Distinctiveness Conflict Risk

A clear niche — AWS Secrets Manager specifically via AWS SDK for Java 2.x — with distinct triggers (secret rotation, database credentials, Spring Boot secret management) and minimal overlap risk; third-person voice is used correctly. A generic 'credential management' skill could partially overlap, but the explicit AWS/Java binding keeps conflict risk minimal.

5 / 5

Total

18

/

20

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

allowed_tools_field

'allowed-tools' contains unusual tool name(s)

Warning

Total

15

/

16

Passed

Repository

fernandezbaptiste/developer-kit

Path

plugins/developer-kit-java/skills/aws-sdk-java-v2-secrets-manager/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.