CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

cfn-template-compare

Compares deployed CloudFormation templates with locally synthesized CDK templates to detect drift, validate changes, and ensure consistency before deployment. Use when the user wants to compare CDK output with a deployed stack, check for infrastructure drift, run a pre-deployment validation, audit IAM or security changes, investigate a failing deployment, or perform a 'cdk diff'-style review. Triggered by phrases like 'compare templates', 'check for drift', 'cfn drift', 'stack comparison', 'infrastructure drift detection', 'safe to deploy', or 'what changed in my CDK stack'.

Quality

90%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

SKILL.md
Quality
Evals
Security

Quality

Content

81%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A highly actionable skill with an exemplary validated workflow (prerequisite checks, JSON validation, error recovery table, risk-gated approval). Its main weakness is redundancy: Quick Start vs Expected Workflow duplication, a repeated risk-assessment section, and multiple re-coverages of CDK Nag suppression inflate token cost without adding guidance. Bundle structure is good but one reference file is orphaned.

Suggestions

Remove the Quick Start section (or reduce it to a one-line pointer to the automated script), since its six commands are duplicated verbatim in Expected Workflow Steps 2-3 — this alone would cut significant tokens.

Merge 'Risk Assessment Strategy' into the Step 4 risk table, and consolidate the four overlapping CDK Nag suppression / resource removal passages (risk table, decision framework, anti-patterns, common scenarios) into the single anti-pattern entry.

Link references/markdown-report-example.md from the References section so the bundle's report example is discoverable, and consider moving the ten anti-pattern sections into a reference file to keep SKILL.md as an overview.

DimensionReasoningScore

Conciseness

Mostly efficient (commands and tables, no explaining of concepts Claude already knows), but noticeably redundant: the Quick Start duplicates the retrieval and hierarchical-analysis commands from Steps 2-3, the risk categorization appears twice (Step 4 table plus 'Risk Assessment Strategy'), and CDK Nag suppression handling is covered four separate times (risk table, decision framework, its own anti-pattern, and Common Scenarios).

3 / 5

Actionability

Fully executable, copy-paste-ready bash throughout: concrete aws cloudformation get-template/describe-stacks commands, jq filters for resource keys, counts, IAM resources and cdk_nag metadata, diff/comm invocations, and a complete heredoc report template. Placeholders (<stack-name>, <region>, <profile>) are appropriately parameterized rather than pseudocode.

5 / 5

Workflow Clarity

Clear five-step sequence with explicit validation: Step 1 verifies credentials, stack existence, and clean synth before retrieval; Step 2 validates both JSON files; Steps 3-5 provide hierarchical analysis, risk classification, and artifact persistence. Feedback loops are explicit via per-step '→ If this fails' notes and the Error Recovery table, and the risk table enforces blocking checkpoints for IAM/Nag-suppression/resource-removal diffs.

5 / 5

Progressive Disclosure

Good structure with clearly signaled one-level-deep references to scripts/compare-cfn-templates.sh and references/compare-cfn-templates.md, both of which exist in the bundle. However references/markdown-report-example.md is present in the bundle but never linked from SKILL.md, and the ten inlined anti-pattern sections are content that could partly live in a reference file.

4 / 5

Total

17

/

20

Passed

Description

95%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong description in third-person voice with an explicit 'Use when...' clause and a rich set of natural trigger phrases. Both what and when are clearly answered with concrete, domain-specific language. The only weakness is slightly generic phrasing of 'validate changes' and 'ensure consistency'.

DimensionReasoningScore

Specificity

Names several concrete actions — 'Compares deployed CloudFormation templates with locally synthesized CDK templates to detect drift, validate changes, and ensure consistency' — but 'validate changes' and 'ensure consistency' are somewhat generic, leaving minor gaps versus comprehensive coverage.

4 / 5

Completeness

Clearly answers both what (compare deployed CFN vs synthesized CDK templates to detect drift, validate changes) and when ('Use when the user wants to compare CDK output with a deployed stack, check for infrastructure drift, run a pre-deployment validation, audit IAM or security changes...') with concrete trigger phrases.

5 / 5

Trigger Term Quality

Comprehensive natural trigger phrases including synonyms and tool names: 'compare templates', 'check for drift', 'cfn drift', 'stack comparison', 'infrastructure drift detection', 'safe to deploy', 'what changed in my CDK stack', and 'cdk diff'-style review — all phrased the way a user would actually say them.

5 / 5

Distinctiveness Conflict Risk

Clear niche (CloudFormation/CDK template comparison) with distinct triggers like 'cfn drift', 'stack comparison', and 'cdk diff' that are unlikely to fire for unrelated skills; minimal overlap risk.

5 / 5

Total

19

/

20

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository

pantheon-org/tekhne

Path

skills/infrastructure/cfn/template-compare/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.