Agent skill

Spa Create Config

by splunk in splunk/splunk-platform-automator

A skill your agent uses when creating or updating splunkconfig.yml, designing Splunk Enterprise lab topology, multisite IDXC, SHC layout, architecture plan before config, or AWS Terraform block for…

ProprietaryAuto-check passedDevOps & Cloud

Install Spa Create Config

skills CLI
$ npx skills add splunk/splunk-platform-automator --skill spa-create-config -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install splunk/splunk-platform-automator spa-create-config --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/splunk/splunk-platform-automator.git skills-src && mkdir -p .claude/skills && cp -r skills-src/skills/spa/spa-create-config .claude/skills/spa-create-config && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
spa-create-config
GitHub stars
137
Token cost
~3.5k tokens
SKILL.md length
1,367 words
Files
17 (incl. scripts, references, assets)
Skills in repo
2
Repo updated
First seen
Licence
Proprietary

At a glance

A skill your agent uses when creating or updating splunkconfig.yml, designing Splunk Enterprise lab topology, multisite IDXC, SHC layout, architecture plan before config, or AWS Terraform block for…

  • Works in 10 steps: Environment setup → Topology path → Sizing tier → …
  • Updating splunkconfig.yml
  • SKILL.md covers When to Use, When NOT to Use, Secrets — never display… and Reference files (load on demand), plus 17 more sections
  • Calls python3 and aws; needs SPLUNKBASE_PASSWORD and AWS_ACCESS_KEY_ID

What it does

Spa Create Config is an agent skill from splunk/splunk-platform-automator. Use when creating or updating splunkconfig.yml, designing Splunk Enterprise lab topology, multisite IDXC, SHC layout, architecture plan before config, or AWS Terraform block for SPA. Guides interactive design on AWS Linux: deployment intent, SVA topology, role placement, OS/SSH, splunkconfigaws.py discovery, licenses, apps, validation. In Cursor invoke with /spa-create-config.

Its SKILL.md is about 3.5k tokens, which your agent loads only when the skill is triggered. The skill folder holds 19 other files, including scripts, reference files and assets (for example `assets/architecture-plan-template.md`, `assets/config-header-template.md` and `references/apps-questionnaire.md`). Compatibility notes: Requires SPA repo root (ansible.cfg, bin/). Optional boto3 for AWS discovery.

It sits in DevOps & Cloud, covering Infrastructure as code and Deployment. It works with Splunk, Amazon Web Services, Linux and Terraform. The repository describes itself as: Ansible framework providing a fast and simple way to spin up complex Splunk environments.

When your agent uses it

  • Updating splunkconfig.yml
  • Designing Splunk Enterprise lab topology
  • Architecture plan before config
  • AWS Terraform block for SPA

Example prompts

  • “/spa-create-config”

Requirements

  • Python 3
  • A credential in AWS_SECRET_ACCESS_KEY
  • A credential in AWS_SESSION_TOKEN
  • Compatibility (from SKILL.md): Requires SPA repo root (ansible.cfg, bin/). Optional boto3 for AWS discovery.

Workflow steps

10 steps, taken from the step headings in SKILL.md.

  1. Environment setup
  2. Topology path
  3. Sizing tier
  4. Linux OS
  5. AWS settings
  6. Topology counts
  7. Apps (optional)
  8. Write config
  9. Validate (quality gate)
  10. Handoff

What it can do on your machine

Read from SKILL.md and the folder at commit 6071df2. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    Ships 1 file in scripts/, which the agent can run.

    Shell commands in SKILL.md call:

    • python3
    • aws

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    No URLs in SKILL.md. Its commands use aws, which can reach the network depending on how they are called.

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names these keys or tokens, usually read from environment variables:

    • SPLUNKBASE_PASSWORD
    • AWS_ACCESS_KEY_ID
    • AWS_SECRET_ACCESS_KEY
    • AWS_SESSION_TOKEN

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

  • Compatibility

    Requires SPA repo root (ansible.cfg, bin/). Optional boto3 for AWS discovery.

    From compatibility in the SKILL.md frontmatter.

Context cost

Spa Create Config loads about 3.5k tokens when it runs, and up to ~16k if it reads all its reference files. Until then it costs about 100 tokens; SKILL.md has 1,367 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~100
When it runs · the whole SKILL.md, loaded when a task matches
~3.5k
With references · SKILL.md plus every file in references/, read only if the agent opens them
~16k

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); the scripts in this folder are not scanned.

SKILL.md

Its licence (Proprietary) doesn't allow us to republish the file, so here is its outline and opening line. It has 1,367 words (~3,528 tokens).

“Interactive workflow for config/splunk_config.yml on AWS. Linux only.”

— opening of SKILL.md by splunk, Proprietary
name
spa-create-config
compatibility
Requires SPA repo root (ansible.cfg, bin/). Optional boto3 for AWS discovery.
license
Proprietary
metadata.product
splunk-platform-automator
metadata.version
1.0.0
paths
config/splunk_config.yml, examples/**/*.yml, examples/configuration_description.yml

Read the full SKILL.md on GitHub

Files

SKILL.md and 16 other files (scripts, references, assets) in skills/spa/spa-create-config of splunk/splunk-platform-automator.

  • SKILL.md
  • assets/architecture-plan-template.md
  • assets/config-header-template.md
  • references/apps-questionnaire.md
  • references/architecture-requirements.md
  • references/aws-baseline.md
  • references/aws-os-matrix.md
  • references/aws-without-credentials.md
  • references/licenses.md
  • references/reference-links.md
  • references/rf-sf-sizing.md
  • references/role-placement.md
  • references/secrets-handling.md
  • references/sva-questionnaire.md
  • references/sva-topology-map.md
  • references/validation.md
  • scripts/README.md

Open the folder on GitHubat commit 6071df2

Compare with similar skills

Spa Create Config next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Spa Create Config compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
Spa Create Config this skillsplunk/splunk-platform-automator137—~3.5kAutomated safety check: PassProprietary
Senior DevOps Toolkitmaslennikov-ig/claude-code-orchestrator-kit2596 repos~1.1kAutomated safety check: NotesCustom licence
Devops Deploysickn33/agentic-awesome-skills47k2 repos~1.9kAutomated safety check: PassMIT
Configuring AWS Verified Access For Ztnamukul975/Anthropic-Cybersecurity-Skills34k—~3.8kAutomated safety check: PassApache-2.0
Cloud Infrastructureaiskillstore/marketplace4301 repos~1.3kAutomated safety check: PassNone
Discover Infrarand/cc-polymath181—~783Automated safety check: PassMIT

Similar skills

  • Senior DevOps Toolkit

    maslennikov-ig/claude-code-orchestrator-kit

    Comprehensive DevOps skill for CI/CD, infrastructure automation, containerization, and cloud platforms (AWS, GCP, Azure). Includes pipeline setup…

    259 GitHub starsUsed in 6 repos~1.1k tokens
    DevOps & CloudAuto-check: notes
  • Devops Deploy

    sickn33/agentic-awesome-skills

    DevOps e deploy de aplicacoes — Docker, CI/CD com GitHub Actions, AWS Lambda, SAM, Terraform, infraestrutura como codigo e monitoramento.

    47k GitHub starsUsed in 2 repos~1.9k tokens
    DevOps & CloudAuto-check passed
  • Configuring AWS Verified Access For Ztna

    mukul975/Anthropic-Cybersecurity-Skills

    Configure AWS Verified Access to provide VPN-less zero trust network access to internal apps, combining identity trust providers (IAM Identity Center, Okta/OIDC), device posture providers…

    34k GitHub stars~3.8k tokensUpdated 1 mo ago
    DevOps & CloudAuto-check passed
  • Cloud Infrastructure

    aiskillstore/marketplace

    Cloud infrastructure design and deployment patterns for AWS, Azure, and GCP.

    430 GitHub starsUsed in 1 repo~1.3k tokens
    DevOps & CloudAuto-check passed
  • Discover Infra

    rand/cc-polymath

    Automatically discover cloud, infrastructure, deployment, and container skills when working with AWS, GCP, Azure, Docker, Kubernetes, Terraform, Netlify, Heroku, serverless, or IaC

    181 GitHub stars~783 tokensUpdated 7 mo ago
    DevOps & CloudAuto-check passed
  • AWS Cdk Development

    zxkane/aws-skills

    AWS Cloud Development Kit (CDK) expert for building cloud infrastructure with TypeScript/Python.

    367 GitHub starsUsed in 2 repos~2.5k tokens
    DevOps & CloudAuto-check passed

More from splunk/splunk-platform-automator

  • Spa Add Test Scenario

    splunk/splunk-platform-automator

    A skill your agent uses when adding app scope/routing test coverage (deployer, CM, DS, direct).

    137 GitHub stars~2.2k tokensUpdated yesterday
    Auto-check passed

Categories

Questions about Spa Create Config

What does Spa Create Config do?

A skill your agent uses when creating or updating splunkconfig.yml, designing Splunk Enterprise lab topology, multisite IDXC, SHC layout, architecture plan before config, or AWS Terraform block for…. Spa Create Config is an agent skill from splunk/splunk-platform-automator.yml, designing Splunk Enterprise lab topology, multisite IDXC, SHC layout, architecture plan before config, or AWS Terraform block for SPA.

When should I use Spa Create Config?

Spa Create Config fits situations like: updating splunkconfig.yml; designing Splunk Enterprise lab topology; architecture plan before config; AWS Terraform block for SPA.

How do I install Spa Create Config in Claude Code?

Run `npx skills add splunk/splunk-platform-automator --skill spa-create-config -a claude-code`. Or copy the skill folder (skills/spa/spa-create-config in splunk/splunk-platform-automator) into .claude/skills/spa-create-config in your project. Claude Code loads it when a task matches its description.

How do I install Spa Create Config in Codex?

Run `npx skills add splunk/splunk-platform-automator --skill spa-create-config -a codex`. Or copy the skill folder (skills/spa/spa-create-config in splunk/splunk-platform-automator) into .agents/skills/spa-create-config in your project. Codex loads it when a task matches its description.

Can I use Spa Create Config in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add splunk/splunk-platform-automator --skill spa-create-config -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/spa-create-config, .gemini/skills/spa-create-config, .github/skills/spa-create-config and .opencode/skills/spa-create-config in your project.

What does Spa Create Config need to run?

Going by SKILL.md and its folder, Spa Create Config needs the command-line tools its instructions call (python3 and aws) and credentials named SPLUNKBASE_PASSWORD, AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY and AWS_SESSION_TOKEN. Our summary lists: Python 3; A credential in AWS_SECRET_ACCESS_KEY; A credential in AWS_SESSION_TOKEN. Compatibility (from SKILL.md): Requires SPA repo root (ansible.cfg, bin/). Optional boto3 for AWS discovery..

Does Spa Create Config access the network?

SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.

Is Spa Create Config safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. The check reads SKILL.md only: the scripts in the folder are not scanned, so read them before running anything.

What licence does Spa Create Config use?

Spa Create Config carries a proprietary licence (declared in SKILL.md). It is published on GitHub, but it is not open source: read the licence file before using or sharing it.

How many tokens does Spa Create Config use?

About 3.5k tokens (SKILL.md is roughly 14k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full. Its references folder adds about 12k tokens, read only when the agent opens those files.

What are the alternatives to Spa Create Config?

Skills that share tags, products or a category with Spa Create Config: Senior DevOps Toolkit (maslennikov-ig/claude-code-orchestrator-kit, 259 stars), Devops Deploy (sickn33/agentic-awesome-skills, 47k stars), Configuring AWS Verified Access For Ztna (mukul975/Anthropic-Cybersecurity-Skills, 34k stars) and Cloud Infrastructure (aiskillstore/marketplace, 430 stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Spa Create Config?

splunk (a GitHub organization) maintains it in splunk/splunk-platform-automator, which has 137 GitHub stars. The repository holds 2 skills in this directory. The repository was last updated on October 6, 2026.

Source: splunk/splunk-platform-automator on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.