CtrlK
BlogDocsLog inGet started
Tessl Logo

drift-detector

Detect infrastructure drift between Terraform state and actual cloud resources. Identifies unmanaged resources, manual changes, and configuration drift. Use when: - User asks to check for infrastructure drift - User wants to find unmanaged cloud resources - User mentions "drift detection" or "Terraform drift" - User asks to compare cloud state to IaC - User wants to audit infrastructure changes

68

Quality

82%

Does it follow best practices?

Impact

No eval scenarios have been run

SecuritybySnyk

Passed

No known issues

SKILL.md
Quality
Evals
Security

Quality

Content

64%

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

This is a solid, actionable skill with clear phased structure and executable commands throughout. Its main weaknesses are missing validation/verification checkpoints in the workflow (especially around destructive remediation steps and post-scan verification), and moderate verbosity with some content that could be trimmed or split into referenced files. The referenced bundle files (SERVICES.md, EXAMPLES.md) don't exist, weakening the progressive disclosure story.

Suggestions

Add explicit validation checkpoints after key phases: verify scan completion in Phase 2, verify import success after Step 4.1, and re-run drift detection after remediation to confirm drift is resolved.

Add a confirmation/verification step before destructive operations in Step 4.2 (e.g., 'List the resource details first, confirm with user, then delete').

Trim the report template in Phase 3 to a shorter example or move it to EXAMPLES.md — the current inline template is verbose for a skill file.

Provide the referenced SERVICES.md and EXAMPLES.md bundle files, or remove the references if they don't exist.

DimensionReasoningScore

Conciseness

The skill is reasonably well-structured but includes unnecessary verbosity in several places. The prerequisites section explains basic cloud credential verification commands Claude already knows. The report template in Phase 3 is overly detailed with hardcoded dates and example data. The constraints section restates obvious points. The error handling section provides generic troubleshooting that Claude could infer.

2 / 3

Actionability

The skill provides fully executable, copy-paste-ready commands throughout — from basic snyk CLI invocations to terraform import blocks, CI/CD YAML, and remediation commands. Code examples are concrete with real flags, paths, and provider-specific syntax rather than pseudocode.

3 / 3

Workflow Clarity

The five-phase structure provides a clear sequence from setup through prevention. However, validation checkpoints are largely missing — there's no explicit 'verify the scan completed successfully' step after Phase 2, no validation after importing resources in Phase 4, and no feedback loop for confirming remediation resolved the drift. For destructive operations like deleting unmanaged resources (Step 4.2), there's no verification gate beyond 'after verification.'

2 / 3

Progressive Disclosure

The skill references SERVICES.md and EXAMPLES.md for detailed content, which is good progressive disclosure. However, no bundle files are provided, so these references are unverifiable. The main file itself is quite long (~200+ lines) with inline content that could be split out (e.g., the full report template, CI/CD examples, error handling). The Common Scenarios section appropriately summarizes and points to EXAMPLES.md.

2 / 3

Total

9

/

12

Passed

Description

100%

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

This is an excellent skill description that hits all the marks. It provides specific capabilities, comprehensive trigger terms that users would naturally use, explicit 'Use when' guidance with multiple scenarios, and a clearly distinctive niche around Terraform drift detection. The third-person voice is used correctly throughout.

DimensionReasoningScore

Specificity

Lists multiple specific concrete actions: detect infrastructure drift, identify unmanaged resources, identify manual changes, and identify configuration drift. These are concrete, actionable capabilities.

3 / 3

Completeness

Clearly answers both 'what' (detect drift between Terraform state and actual cloud resources, identify unmanaged resources, manual changes, configuration drift) and 'when' with an explicit 'Use when:' clause listing five specific trigger scenarios.

3 / 3

Trigger Term Quality

Excellent coverage of natural terms users would say: 'infrastructure drift', 'unmanaged cloud resources', 'drift detection', 'Terraform drift', 'compare cloud state to IaC', 'audit infrastructure changes'. These are terms users would naturally use.

3 / 3

Distinctiveness Conflict Risk

Highly distinctive with a clear niche: Terraform drift detection specifically. The combination of 'Terraform state', 'drift detection', and 'unmanaged resources' creates a unique profile unlikely to conflict with general Terraform or cloud management skills.

3 / 3

Total

12

/

12

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation11 / 11 Passed

Validation for skill structure

No warnings or errors.

Repository
snyk/studio-recipes
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.