iam

AWS Identity and Access Management for users, roles, policies, and permissions. Use when creating IAM policies, configuring cross-account access, setting up service roles, troubleshooting permission errors, or managing access control.

1.04x

Quality

87%

Does it follow best practices?

Impact

94%

1.04x

Average score across 3 eval scenarios

Securityby

Passed

No findings from the security scan

Quality

Content

82%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A well-structured, highly actionable IAM reference with executable CLI and boto3 examples and a solid troubleshooting workflow. The main weakness is mild over-explanation of foundational IAM concepts that Claude already knows.

Suggestions

Trim the 'Core Concepts' section to a terse glossary or remove definitions Claude already knows (principals, identity- vs resource-based policies), keeping only IAM-specific nuances.

Add an explicit validation checkpoint to the role/policy creation patterns (e.g. simulate-principal-policy or get-role verification) so the common workflows mirror the troubleshooting section's rigor.

Consider moving the CLI reference table and policy size limits into a separate reference file to keep SKILL.md as a lean overview, improving progressive disclosure.

Dimension	Reasoning	Score
Conciseness	Mostly lean and efficient with executable code and reference tables, though the 'Core Concepts' section re-explains IAM primitives (principals, identity- vs resource-based policies) Claude already knows.	4 / 5
Actionability	Provides complete, copy-paste-ready AWS CLI heredocs, full JSON policy documents, and boto3 examples that cover the common cases (service roles, least-privilege policies, cross-account assumption).	5 / 5
Workflow Clarity	The Troubleshooting section gives a clear numbered debug sequence with verification (get-caller-identity, list policies, simulate-principal-policy); the creation patterns lack explicit validation checkpoints but are not destructive batch operations.	4 / 5
Progressive Disclosure	Well-organized single-file structure with a table of contents and clear section headings; external AWS doc links are one level deep. No bundle files exist, so all content is appropriately inline with minor organization gaps.	4 / 5
	Total	17 / 20 Passed

Description

92%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong, third-person description that crisply states both the skill's purpose and a rich set of natural trigger conditions. Minor keyword synonym coverage could be expanded, but it is otherwise exemplary.

Dimension	Reasoning	Score
Specificity	Lists multiple concrete actions — 'creating IAM policies, configuring cross-account access, setting up service roles, troubleshooting permission errors, managing access control' — giving comprehensive coverage of the skill's capabilities.	5 / 5
Completeness	Explicitly states what it does ('AWS Identity and Access Management for users, roles, policies, and permissions') and when to use it via a clear 'Use when creating IAM policies...' clause with concrete triggers.	5 / 5
Trigger Term Quality	Natural terms like 'IAM policies', 'cross-account access', 'service roles', and 'permission errors' are well covered, though a few common synonyms (e.g. 'IAM users', 'STS', 'assume role') are absent.	4 / 5
Distinctiveness Conflict Risk	'AWS IAM' is a clear, narrow niche with distinct triggers (IAM policies, cross-account access, service roles) that are unlikely to conflict with other skills.	5 / 5
	Total	19 / 20 Passed

Validation

93%

Warnings & errors only

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 15 / 16 Passed

Validation for skill structure

Criteria	Description	Result
frontmatter_unknown_keys	Unknown frontmatter key(s) found; consider removing or moving to metadata	Warning

	Total	15 / 16 Passed

Repository: itsmostafa/aws-agent-skills
Path: skills/iam/SKILL.md
Commit: e786d25

Reviewed: 2 days ago

Table of Contents

Discovery Implementation Validation

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.