sharaf/migrate-to-tessl
Use when migrating, restructuring, publishing, or auditing an existing Claude skill into a Tessl tile; converting flat .md files or SKILL.md bundles; fixing Tessl Quality, Impact, Uplift, frontmatter, metadata, tile.json summary, README, markdown reference links, registry-vs-local Quality gaps, artifact anchors, auto-eval wait discipline, or pushing tile scores from 88-99% to 100%.
100
100%
Does it follow best practices?
Impact
100%
1.11xAverage score across 4 eval scenarios
Advisory
Suggest reviewing before use
Security
1 medium severity finding. This skill can be installed but you should review these findings before use.
W012: Unverifiable external dependency detected (runtime URL that controls agent)
What this means
The skill fetches instructions or code from an external URL at runtime, and the fetched content directly controls the agent’s prompts or executes code. This dynamic dependency allows the external source to modify the agent’s behavior without any changes to the skill itself.
Why it was flagged
Potentially malicious external URL detected (high risk: 0.80). The runbook explicitly requires installing and invoking external Tessl skills (e.g., via "tessl install tessl-labs/tile-creator" and "tessl install tessl/skill-optimizer"), which fetch and execute code from the Tessl registry (https://tessl.io and API endpoints such as https://api.tessl.io/v1/tiles/...), so remote content fetched at runtime can directly control agent behavior.
- Audited
- Security analysis