CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

connecting-to-data-source

Create and troubleshoot AWS Glue connections to JDBC databases (Oracle, SQL Server, PostgreSQL, MySQL, RDS), Redshift, Snowflake, and BigQuery. Gathers connection hints from user, discovers existing connections and RDS/Redshift candidates, registers credentials in Secrets Manager or IAM DB auth, configures VPC, and tests. Triggers on: connect to database, set up Glue connection, register data source, connect to Snowflake/BigQuery/RDS, connection timeout, test connection, troubleshoot connection. Do NOT use for moving data (use ingesting-into-data-lake), creating tables (use creating-data-lake-table), queries (use querying-data-lake), catalog exploration (use exploring-data-catalog), or SaaS (Salesforce, ServiceNow, SAP, MongoDB, Kafka).

Quality

89%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

The canonical home for this skill is connecting-to-data-source in aws/agent-toolkit-for-aws

SKILL.md
Quality
Evals
Security

Quality

Content

85%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A well-engineered skill body: a validated 8-step workflow with genuine feedback loops, correct and specific AWS gotchas, and a clean one-level-deep reference structure confirmed against the actual bundle. The residual issues are minor — slight redundancy in the troubleshooting table and the create-connection JSON template being deferred entirely to reference files.

Suggestions

Replace the per-row "See [troubleshooting.md](references/troubleshooting.md)" entries in the Troubleshooting table with a single lead-in sentence ("Full diagnostic flow: [troubleshooting.md](references/troubleshooting.md)"), keeping only the rows with inline fixes distinct.

Inline one minimal connection-input JSON example (e.g., a JDBC connection with SECRET_ID and PhysicalConnectionRequirements) in Step 6 so the create command is copy-paste-ready without a file hop, leaving full per-source variants in the references.

Rename the "Common Tasks" section (which contains only the MCP-vs-CLI tool policy, not tasks) to something like "Execution Policy" or fold it into the workflow preamble.

DimensionReasoningScore

Conciseness

The body is dense and nearly every section carries non-obvious domain knowledge (e.g., "IAM database authentication tokens expire in 15 minutes", "AvailabilityZone MUST match the subnet's AZ or the connection fails at job runtime"). It is not a 5 because of minor fat: every row of the Troubleshooting table repeats "See [troubleshooting.md]" where a single lead-in would do, and the tool-usage policy (MCP vs CLI) sits under a "Common Tasks" header that contains no tasks.

4 / 5

Actionability

Concrete, mostly executable guidance: real CLI commands ("aws glue get-connections --filter ConnectionType=<TYPE>", "aws glue test-connection --connection-name <NAME>", "aws sts get-caller-identity"), per-source hint checklists, argument routing rules, and a source-classification table. It stops short of the 5 anchor because the create step shows "aws glue create-connection --connection-input '<JSON>'" without an inline JSON example — the copy-paste-ready templates live in the reference files, leaving a small gap in the body itself.

4 / 5

Workflow Clarity

An 8-step clearly sequenced workflow with explicit validation checkpoints and a feedback loop: mandatory two-phase testing ("You MUST test before handing off"; TestConnection then engine-level verification), "On failure in either phase, Step 8" routes into ordered troubleshooting (network, credentials, driver), and credential-affecting actions are gated on user confirmation. This matches the 5 anchor (explicit validation steps, feedback loops for error recovery); it is not a 4 because no checkpoint is implicit or missing.

5 / 5

Progressive Disclosure

Verified against the actual bundle: all 7 referenced files (jdbc-setup, snowflake-setup, bigquery-setup, discovery, credential-security, network-setup, troubleshooting) exist under references/, are linked at the point of use within the workflow plus a consolidated References section, and are exactly one level deep — the only cross-links between them (e.g., snowflake-setup → jdbc-setup#connection-json-template) are appropriate peer pointers, not nested chains. The SKILL.md body stays a concise overview while details are properly split out, matching the 5 anchor.

5 / 5

Total

18

/

20

Passed

Description

92%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

An exemplary description: concrete multi-action capability statement in third person, explicit trigger phrases, and an explicit do-not-use boundary that cleanly separates it from sibling data-lake skills. The only weakness is trigger-term coverage, which is strong but omits some natural user variations.

DimensionReasoningScore

Specificity

The description lists multiple concrete actions — "Gathers connection hints from user, discovers existing connections and RDS/Redshift candidates, registers credentials in Secrets Manager or IAM DB auth, configures VPC, and tests" — plus named source engines (Oracle, SQL Server, PostgreSQL, MySQL, RDS, Redshift, Snowflake, BigQuery), in third-person voice. This matches the 5 anchor (multiple specific concrete actions, comprehensive coverage); it is not the 4 anchor because there are no meaningful coverage gaps in the workflow it describes.

5 / 5

Completeness

It explicitly answers both what ("Create and troubleshoot AWS Glue connections to..." with sub-actions) and when ("Triggers on: connect to database, set up Glue connection..."), with concrete trigger phrases — the exact structure of the 5 anchor example. A 4 would require the 'when' to be less explicit, which it is not.

5 / 5

Trigger Term Quality

Triggers include natural user phrasings — "connect to database", "set up Glue connection", "register data source", "connection timeout", "test connection", "troubleshoot connection" — which is good keyword coverage. It falls short of the 5 anchor because common variations like "add a data source", "link Oracle/Postgres to Glue", or engine-specific phrases ("connect to Redshift" beyond the grouped Snowflake/BigQuery/RDS list) are not covered.

4 / 5

Distinctiveness Conflict Risk

A clear niche (AWS Glue connection setup) with explicit negative boundary guidance — "Do NOT use for moving data (use ingesting-into-data-lake), creating tables..., queries..., catalog exploration..., or SaaS" — minimizes conflict with closely related sibling skills. This matches the 5 anchor (clear niche with distinct triggers, minimal conflict risk).

5 / 5

Total

19

/

20

Passed

Validation

81%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 13 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

metadata_version

'metadata.version' is missing

Warning

metadata_field

'metadata' should map string keys to string values

Warning

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

13

/

16

Passed

Repository

mreferre/aws-agent-toolkit-skills

Path

.kiro/skills/connecting-to-data-source/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.