Rego is the declarative policy language used by Open Policy Agent (OPA). This tile covers writing and testing Rego policies for Kubernetes admission control, Terraform and infrastructure-as-code plan validation, Docker container authorization, HTTP API authorization, RBAC and role-based access control, data filtering, metadata annotations with opa inspect, and OPA policy testing with opa test.
99
Quality
Pending
Does it follow best practices?
Impact
99%
1.19xAverage score across 31 eval scenarios
Pending
The risk profile of this skill
{
"context": "Evaluates whether the agent produces a Rego policy with complete OPA metadata annotations at both package and rule level, including title, description, authors, entrypoint markers, and custom fields.",
"type": "weighted_checklist",
"checklist": [
{
"name": "package has METADATA block with title and description",
"description": "The package declaration is preceded by a `# METADATA` comment block containing both `title:` and `description:` fields",
"max_score": 20
},
{
"name": "package has authors or organizations",
"description": "The package-level `# METADATA` block includes an `authors:` or `organizations:` field",
"max_score": 15
},
{
"name": "decision rules have METADATA with title and description",
"description": "Each decision rule (deny, violation, etc.) is preceded by a `# METADATA` block with `title:` and `description:` fields",
"max_score": 20
},
{
"name": "decision rules have entrypoint: true",
"description": "Each decision rule's `# METADATA` block includes `entrypoint: true`",
"max_score": 25
},
{
"name": "rules have custom fields",
"description": "Rule-level metadata includes a `custom:` block with at least a `severity:` field",
"max_score": 10
},
{
"name": "Tests pass",
"description": "All tests pass when running `opa test . -v`",
"max_score": 10
}
]
}docs
evals
scenario-1
scenario-2
scenario-3
scenario-4
scenario-5
scenario-6
scenario-7
scenario-8
scenario-9
scenario-10
scenario-11
scenario-12
scenario-13
scenario-14
scenario-15
scenario-16
scenario-17
scenario-18
scenario-19
scenario-20
scenario-21
scenario-22
scenario-23
scenario-24
scenario-25
scenario-26
scenario-27
scenario-28
scenario-29
scenario-30
scenario-31