CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

creating-production-vpc-multi-az

Creates a production-ready VPC with public and private subnets across multiple Availability Zones, including internet gateway, NAT gateways, route tables, and security groups following AWS Well-Architected principles. Use when deploying multi-AZ VPC infrastructure with automatic CIDR planning and DNS resolution.

Quality

85%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

The canonical home for this skill is creating-production-vpc-multi-az in aws/agent-toolkit-for-aws

SKILL.md
Quality
Evals
Security

Quality

Content

78%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A well-structured skill body: concise, assumes AWS competence, and delegates the detailed multi-step procedure to a clearly signaled one-level-deep reference file that genuinely contains it, with a useful troubleshooting section that doubles as validation guidance. The main gaps are minor duplication between the description, Overview, and Troubleshooting, and no inline quick-start command sequence for the default case.

Suggestions

Trim or repurpose the Overview section, which restates the frontmatter description nearly verbatim — the body could open directly with the task section.

Consolidate the 0.0.0.0/0 guidance: it currently appears both in the allowed_web_cidrs parameter note and in the 'Security group CIDR warnings' troubleshooting subsection.

Consider adding a minimal inline quick-start example (e.g., the first two or three concrete aws CLI calls for the default 3-AZ case) so the body is executable on its own without opening the reference for common requests.

DimensionReasoningScore

Conciseness

The body is lean and assumes AWS competence — no explanations of what a VPC or NAT gateway is. Minor trimming is possible: the Overview paragraph restates the frontmatter description almost verbatim ("public and private subnets... internet gateway, NAT gateways... following AWS Well-Architected principles"), and the 0.0.0.0/0 guidance appears both in the `allowed_web_cidrs` parameter note and again in Troubleshooting. That duplication places it at anchor 4 ('minor instances... could be trimmed') rather than anchor 5's every-token-earns-its-place.

4 / 5

Actionability

Concrete, executable elements are present: exact parameter names with required/optional status, defaults, and ranges ("availability_zones (optional, default 3): Number of AZs (2–6)"), a runnable command ("aws ec2 describe-availability-zones"), and an unambiguous pointer to the full procedure ("follow the procedure exactly. See [Production VPC creation procedure](references/create-production-vpc-multi-az.md)"). It stops short of anchor 5 only because the body itself contains no executable creation sequence — the copy-paste-ready steps all live in the reference file.

4 / 5

Workflow Clarity

The body clearly delegates the multi-step sequence to the referenced procedure and surfaces the key checkpoints: dependency/AZ verification ("The target region must have at least 2 available AZs. Use aws ec2 describe-availability-zones to verify") and the NAT Gateway wait before route table configuration ("The procedure waits for availability before configuring route tables"). The referenced procedure itself contains an explicit numbered sequence with verification steps (verify dependencies, validate region/AZs, wait for NAT availability), so validation is not absent; the score sits at 4 rather than 5 because the sequence is not laid out inline in the body and some intermediate checkpoints (e.g., post-creation verification) are only implicit here.

4 / 5

Progressive Disclosure

The structure matches the anchor-5 pattern exactly: a short well-organized body (Overview, Create a production VPC, Troubleshooting) with a single, clearly signaled, one-level-deep reference — "See [Production VPC creation procedure](references/create-production-vpc-multi-az.md)" — which is a real 221-line file containing the detailed steps and full parameter documentation. The bulk of the detail is appropriately split out of SKILL.md and navigation is unambiguous.

5 / 5

Total

17

/

20

Passed

Description

88%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong description: third-person, concrete, and complete with an explicit 'Use when' trigger clause covering concrete scenarios. Keyword coverage is good though a few natural entry phrases (e.g., AWS networking, subnet setup) are missing, and there is minor overlap risk with broader AWS networking skills.

DimensionReasoningScore

Specificity

The description lists multiple concrete capabilities — "public and private subnets across multiple Availability Zones, including internet gateway, NAT gateways, route tables, and security groups" — comprehensively covering the components of a production VPC. Anchor 4 ('several specific actions; minor gaps') fits less well because no meaningful VPC component is missing; the enumeration matches the comprehensiveness of the anchor-5 example.

5 / 5

Completeness

Both halves are explicit: what — "Creates a production-ready VPC with public and private subnets... internet gateway, NAT gateways, route tables, and security groups"; when — "Use when deploying multi-AZ VPC infrastructure with automatic CIDR planning and DNS resolution". This mirrors the anchor-5 example's structure of a concrete capability list followed by an explicit 'Use when' clause with concrete trigger phrases.

5 / 5

Trigger Term Quality

Natural terms users would say are well covered: "VPC", "multi-AZ", "Availability Zones", "public and private subnets", "NAT gateways", "CIDR planning", "DNS resolution". A few plausible entry phrases are absent (e.g., "AWS networking", "set up subnets", "production network"), keeping it just below the comprehensive-with-synonyms anchor 5; it is clearly above anchor 3, which expects missing common variations.

4 / 5

Distinctiveness Conflict Risk

The niche is clear (production multi-AZ VPC creation with CIDR planning and DNS) and triggers are distinctive, but the description would also fire for generic requests like "create a VPC" or "set up security groups" that might belong to simpler AWS networking skills — minor overlap risk with closely related skills, matching anchor 4 rather than the minimal-conflict anchor 5.

4 / 5

Total

18

/

20

Passed

Validation

81%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 13 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

metadata_version

'metadata.version' is missing

Warning

metadata_field

'metadata' should map string keys to string values

Warning

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

13

/

16

Passed

Repository

mreferre/aws-agent-toolkit-skills

Path

.kiro/skills/creating-production-vpc-multi-az/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.