CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

aws-cloudformation-iam

Provides AWS CloudFormation patterns for IAM roles, policies, managed policies, permission boundaries, and trust relationships. Use when modeling least-privilege access, cross-account assumptions, service roles, or reusable IAM stacks that other CloudFormation templates consume.

68

Quality

86%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

The canonical home for this skill is giuseppe-trisciuoglio/developer-kit

SKILL.md
Quality
Evals
Security

Quality

Content

78%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

Well-organized, lean content with executable examples, concrete validation commands, and appropriate offloading of detail to real reference files. The main weaknesses are minor: a few sections could be trimmed, the cross-account example is incomplete, and the validation retry loop is implicit rather than spelled out.

Suggestions

Show the full cross-account role including the companion read-only permission policy, not just the trust policy, so Example 2 is copy-paste complete.

Make the validation feedback loop explicit in Step 5 (e.g., 'If validation fails, fix the template/policy and re-run validate-template before deploying').

Tighten 'Constraints and Warnings' into a denser bullet list to trim tokens without losing the guardrail value.

DimensionReasoningScore

Conciseness

Efficient and assumes Claude's competence — it does not explain what CloudFormation or IAM is — but sections like 'Constraints and Warnings' and parts of the overview could be tightened slightly.

4 / 5

Actionability

Provides executable YAML role/policy examples and concrete CLI commands (validate-template, create-change-set, simulate-principal-policy), with minor gaps such as the cross-account example omitting the companion permission policy.

4 / 5

Workflow Clarity

A clear five-step sequence with a dedicated validation step including commands, satisfying the destructive-operation checkpoint requirement; the feedback loop (validate -> fix -> retry) is implied rather than an explicit retry loop.

4 / 5

Progressive Disclosure

The body is a focused overview that defers larger material to two real, one-level-deep bundle files (`references/examples.md`, `references/reference.md`), both of which exist, with clear signaling in the References section.

5 / 5

Total

17

/

20

Passed

Description

88%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong, well-structured description that clearly states capabilities and explicit use-when triggers in third-person voice. It is specific and comprehensive, with only minor gaps in trigger-term synonyms and slight overlap risk against adjacent AWS CloudFormation skills.

DimensionReasoningScore

Specificity

Lists multiple concrete capabilities — 'IAM roles, policies, managed policies, permission boundaries, and trust relationships' plus 'least-privilege access, cross-account assumptions, service roles, or reusable IAM stacks' — giving comprehensive coverage of the domain.

5 / 5

Completeness

Explicitly answers both what ('Provides AWS CloudFormation patterns for IAM roles, policies...') and when ('Use when modeling least-privilege access, cross-account assumptions, service roles, or reusable IAM stacks...') with concrete trigger phrases.

5 / 5

Trigger Term Quality

Strong natural keywords ('IAM roles', 'cross-account assumptions', 'service roles', 'least-privilege', 'CloudFormation') that users would actually say, but a few common variants (e.g., 'assume role', 'trust policy', 'STS') are absent.

4 / 5

Distinctiveness Conflict Risk

Clear IAM-in-CloudFormation niche with distinct triggers, but minor overlap risk with closely related skills like aws-cloudformation-security that also touch IAM guardrails.

4 / 5

Total

18

/

20

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

allowed_tools_field

'allowed-tools' contains unusual tool name(s)

Warning

Total

15

/

16

Passed

Repository

giuseppe-trisciuoglio/developer-kit

Path

plugins/developer-kit-aws/skills/aws-cloudformation/aws-cloudformation-iam/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.