CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

aws-sdk-java-v2-secrets-manager

Provides AWS Secrets Manager patterns for AWS SDK for Java 2.x, including secret retrieval, caching, rotation-aware access, and Spring Boot integration. Use when storing or reading secrets in Java services, replacing hardcoded credentials, or wiring secret-backed configuration into applications.

68

Quality

86%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

The canonical home for this skill is giuseppe-trisciuoglio/developer-kit

SKILL.md
Quality
Evals
Security

Quality

Content

75%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A well-structured body with a clear six-step workflow, executable Spring-centric examples, and an appropriate split between overview and one-level-deep references. Main gaps are a redundant Best Practices section, missing dependency/error-handling detail, and an unreferenced bundled template asset.

Suggestions

Add one line per reference describing its contents (e.g., what caching-guide.md covers vs spring-boot-integration.md), and reference the bundled assets/templates/SecretsManagerConfigTemplate.java from the body so it is discoverable.

Cut the Best Practices items that restate Instructions 2 and 3 (client reuse, keeping retrieval out of controllers), keeping only genuinely new guidance to remove redundancy.

Add the dependency coordinates for the Secrets Manager caching library and a short executable example of converting AWS exceptions into application-level errors, since instruction 3 requires behavior the examples never show.

DimensionReasoningScore

Conciseness

The body is decision-oriented and free of concept explanations Claude already knows, but "Best Practices" repeats Instructions 2–3 ("Reuse the SDK client and cache instances", "Keep secret retrieval in infrastructure services") and the Overview/When-to-Use sections overlap slightly. Not 3 because padding is minor and localized; not 5 because these redundancies mean not every token earns its place.

4 / 5

Actionability

Two complete, executable Java classes cover the common cases (client bean, typed lookup, cached lookup), but there are no dependency coordinates (the caching client is a separate artifact) and no error-handling example even though instruction 3 mandates converting AWS exceptions into application-level errors. Not 3 because the code shown is fully executable rather than pseudocode; not 5 because of the missing dependency and error-handling details.

4 / 5

Workflow Clarity

The six numbered steps form a clear design-to-validation sequence, and step 6 ("verify IAM permissions and KMS access; test missing secret, wrong region, and decryption failure paths") is an explicit validation checkpoint. Not 5 because there is no feedback loop describing what to do when validation fails; not 3 because checkpoints are explicit rather than merely implicit.

4 / 5

Progressive Disclosure

The body deliberately keeps detail out ("Keep large API notes and extended setup details in the bundled references") and lists three real, one-level-deep reference files. Not 5 because the references are bare paths with no per-file description, and the bundled asset assets/templates/SecretsManagerConfigTemplate.java is never mentioned anywhere in the body, leaving it undiscoverable; not 3 because the split between overview and references is otherwise appropriate.

4 / 5

Total

16

/

20

Passed

Description

92%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong description: third-person, concrete capability list, explicit 'Use when' triggers, and tight service/SDK/framework scoping. The only weakness is moderate synonym coverage for natural trigger terms.

DimensionReasoningScore

Specificity

"secret retrieval, caching, rotation-aware access, and Spring Boot integration" lists four concrete capabilities in third person, comprehensively covering the domain with no generic filler — a closer match to the anchor-5 example than anchor 4's 'minor gaps in coverage'.

5 / 5

Completeness

Explicitly answers what ("Provides AWS Secrets Manager patterns... including secret retrieval, caching, rotation-aware access, and Spring Boot integration") and when ("Use when storing or reading secrets in Java services, replacing hardcoded credentials, or wiring secret-backed configuration"), matching the anchor-5 example structure. Not 4 because the 'when' clause is explicit and lists three concrete trigger scenarios rather than being under-specified.

5 / 5

Trigger Term Quality

Natural phrases like "AWS Secrets Manager", "Java services", "Spring Boot", and "replacing hardcoded credentials" are present, but common user variations such as "password", "API key", "db credentials", and "rotate secret" are missing. Not 3 because coverage goes well beyond 'some relevant keywords'; not 5 because synonyms and extension-level variations are absent.

4 / 5

Distinctiveness Conflict Risk

The description is tightly pinned to a specific AWS service, SDK, and framework, giving a clear niche with distinct triggers and minimal conflict risk against sibling AWS SDK skills. Not 4 because the service-plus-language scoping leaves little realistic overlap with closely related skills.

5 / 5

Total

19

/

20

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

allowed_tools_field

'allowed-tools' contains unusual tool name(s)

Warning

Total

15

/

16

Passed

Repository

giuseppe-trisciuoglio/developer-kit

Path

plugins/developer-kit-java/skills/aws-sdk-java-v2-secrets-manager/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.