CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

launching-ec2-instance-with-best-practices

Launches an EC2 instance with secure, cost-efficient defaults including AMI selection, burstable instance sizing, least-privilege IAM roles, hardened security groups, encrypted EBS volumes, and comprehensive tagging. Use when deploying new EC2 instances following AWS best practices for security and cost optimization.

Quality

89%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

The canonical home for this skill is launching-ec2-instance-with-best-practices in aws/agent-toolkit-for-aws

SKILL.md
Quality
Evals
Security

Quality

Content

85%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A well-structured SKILL.md body: lean overview, clear one-level-deep delegation to a comprehensive, validated launch procedure, and concrete inline troubleshooting. The main improvement would be removing the bullet list that restates the Overview's capability summary, and adding one copy-paste-ready launch command inline.

DimensionReasoningScore

Conciseness

The body is lean and assumes competence, but the 8-bullet "The procedure handles" list substantially duplicates the capability list already given in the Overview paragraph ("Covers AMI selection, instance type recommendation, network configuration, IAM role creation..."), a trimmable redundancy that keeps it below the 5 anchor's every-token-earns-its-place bar.

4 / 5

Actionability

Gives a concrete, unambiguous directive ("follow the procedure exactly. See [EC2 instance launch procedure](references/launch-ec2-instance-with-best-practices.md)") plus executable troubleshooting detail ("aws ec2 get-console-output", key permissions "400", Session Manager alternative); it stops short of 5 because the body carries no inline executable command for the main launch flow itself.

4 / 5

Workflow Clarity

The body delegates to a real 17-step procedure containing explicit validation checkpoints ("Wait for Instance to Reach Running State", "Verify Instance Configuration", "Review and Confirm Launch Configuration"), and the body itself adds error-recovery guidance (retry another AZ/instance type, inspect console output) — matching the 5 anchor's clear sequence, validation, and feedback loops; the launch operation is not destructive/batch so no cap applies.

5 / 5

Progressive Disclosure

A ~35-line overview body with both references clearly signaled as markdown links, one level deep into a single self-contained 1697-line reference file (verified to exist with no nested .md references); the split — quick overview and troubleshooting inline, bulk detail external — matches the 5 anchor.

5 / 5

Total

18

/

20

Passed

Description

92%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong description: concrete, comprehensive, third-person, and with an explicit and specific 'Use when' trigger clause tied to deploying new EC2 instances. The only gap is keyword breadth — it lacks common user phrasings like 'spin up', 'create', or 'provision' an instance.

DimensionReasoningScore

Specificity

Names the concrete action ("Launches an EC2 instance with secure, cost-efficient defaults") and lists six specific capability areas ("AMI selection, burstable instance sizing, least-privilege IAM roles, hardened security groups, encrypted EBS volumes, and comprehensive tagging"), which is comprehensive coverage of the launch pipeline rather than the minor-gaps profile of the 4 anchor.

5 / 5

Completeness

Explicitly answers both what (the launch action plus enumerated defaults) and when ("Use when deploying new EC2 instances following AWS best practices for security and cost optimization") with a concrete trigger phrase; the when-clause is specific and explicit, exceeding the 4 anchor's vague-when profile.

5 / 5

Trigger Term Quality

Good natural keyword coverage ("EC2 instance", "deploy", "AWS", "best practices") but misses common user variations like "spin up", "create", or "provision an instance" — matching the 4 anchor's "good keyword coverage; a few natural terms missing" rather than 5's synonym-and-extension-level completeness.

4 / 5

Distinctiveness Conflict Risk

"Launching EC2 instances" with security/cost hardening is a clear niche with distinct triggers; the description is unlikely to fire for unrelated skills, matching the 5 anchor's minimal conflict risk rather than the 4 anchor's notable overlap with closely related skills.

5 / 5

Total

19

/

20

Passed

Validation

81%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 13 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

metadata_version

'metadata.version' is missing

Warning

metadata_field

'metadata' should map string keys to string values

Warning

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

13

/

16

Passed

Repository

mreferre/aws-agent-toolkit-skills

Path

.kiro/skills/launching-ec2-instance-with-best-practices/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.