CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

daytona

Creates and manages isolated cloud sandboxes (secure code execution environments with dedicated runtimes) on the Daytona platform. Use when a task needs an isolated runtime, sandbox, secure compute, or Daytona SDK/API/CLI operations. Covers Python, TypeScript, Java, Go, and Ruby SDKs.

68

Quality

85%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Failed to scan

The risk profile of this skill

SKILL.md
Quality
Evals
Security

Quality

Content

86%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

An excellent reference-style skill body: executable, output-annotated code for the dominant Python path with tight TypeScript deltas, concrete limits and tier constraints stated as tables, and best-in-class progressive disclosure via a decision tree and index tables that all resolve to real bundle files. The remaining gaps are minor — a redundant TypeScript Image example, inline per-language method listings that duplicate preview.md, no demonstrated error-recovery loop, and no caution around the destructive delete() call.

DimensionReasoningScore

Conciseness

The body is dense and largely earns its tokens: setup checks are actionable, code samples carry only functional comments, and the limits/tier tables are pure signal. Minor trimming opportunities exist — the TypeScript Image-builder block duplicates the Python one almost verbatim despite the earlier 'mirrors the Python API' note, and the preview section inlines per-language method signatures for four SDKs that also live in preview.md. This fits 'Efficient; minor instances of over-explanation that could be trimmed' rather than the every-token-earns-its-place 5.

4 / 5

Actionability

Guidance is copy-paste ready and covers the common cases: verified setup commands (`pip show daytona`, checking `DAYTONA_API_KEY`), complete executable Python for create/exec/file-ops/lifecycle with expected outputs annotated (`.result`, `.exit_code`), a parallel create example with explicit defaults (1 vCPU, 1GB RAM, 3GB disk), and concrete error handling (`DaytonaError`) and async (`AsyncDaytona`) pointers. This matches 'Fully executable; copy-paste ready code or commands; specific examples cover the common cases'.

5 / 5

Workflow Clarity

The primary workflow is well sequenced: 'Before You Start' is an explicit validation checkpoint with a failure branch (missing API key → point the user to the dashboard), the lifecycle section states the archive precondition ('must be stopped first'), and the snapshot pattern cleanly separates one-time setup from repeat use. It falls short of 5 because there are no error-recovery loops (DaytonaError is named but never shown being handled) and the destructive `sandbox.delete()` appears with no validation or caution step — though destructive operations are peripheral rather than the skill's core workflow, this is more than a trivial gap.

4 / 5

Progressive Disclosure

Structure is exemplary: a concise overview with just enough inline code, a Quick Decision Tree mapping tasks to files, an SDK index table, a per-SDK feature-guide filename table, and platform/API reference tables — all references one level deep and clearly signaled. Verified against the actual bundle, essentially every referenced path (including all 18 feature-guide filenames across all five SDK folders) resolves to a real file; the only wrinkle is that `./references/<lang>-sdk/object-storage.md` does not exist at the Python top level (only sync/ and async/ variants) and is absent for Go, but the row's '(Python sync/async, TypeScript, Ruby)' parenthetical correctly signals where those variants live, so navigation is not broken.

5 / 5

Total

18

/

20

Passed

Description

78%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong description with an explicit and well-phrased 'Use when' trigger clause, clear platform scoping, and good natural-language trigger terms. Its main weakness is specificity: it stops at 'creates and manages' without listing the concrete capabilities the skill covers (executing code, file operations, snapshots, preview URLs), and its generic sandbox/runtime triggers carry minor overlap risk with similar cloud-compute skills.

Suggestions

Enumerate 2-3 concrete capabilities in the first sentence (e.g., 'run commands and code, manage files, build snapshot templates inside sandboxes') to lift specificity from 'creates and manages' to a comprehensive action list.

Add one or two common user phrasings as triggers — e.g., 'ephemeral environment' or 'run code in an isolated/dev environment' — to broaden natural keyword coverage beyond 'sandbox' and 'secure compute'.

Sharpen distinctiveness by making Daytona-awareness an explicit disambiguator, e.g., 'Use when the user mentions Daytona or asks for a cloud sandbox on a provider they haven't named' guidance in the when-clause.

DimensionReasoningScore

Specificity

The description names two concrete actions — "Creates and manages isolated cloud sandboxes" — with a useful parenthetical clarifying what a sandbox is ("secure code execution environments with dedicated runtimes"), but "manages" is generic and there is no enumeration of what the skill actually enables inside sandboxes (running code/commands, file operations, snapshots, preview URLs). This matches the anchor 'Names domain and 1-2 concrete actions, but not comprehensive'; it does not reach 4 because several specific actions are missing, and it is above 2 because the actions are concrete and domain-anchored.

3 / 5

Completeness

It explicitly answers both questions: what ("Creates and manages isolated cloud sandboxes ... on the Daytona platform") and when ("Use when a task needs an isolated runtime, sandbox, secure compute, or Daytona SDK/API/CLI operations"). The 'when' clause contains concrete trigger phrases, matching the anchor 'Clearly and explicitly answers both what AND when with concrete trigger phrases'; a 4 would require the 'when' to be less explicit, which is not the case.

5 / 5

Trigger Term Quality

The 'Use when' clause includes natural trigger phrases users would say: "isolated runtime", "sandbox", "secure compute", and "Daytona SDK/API/CLI operations", plus SDK language names. This fits 'Good keyword coverage; a few natural terms missing' — common variations like 'ephemeral environment', 'dev environment', 'remote code execution', or 'cloud VM' are absent, keeping it below the comprehensive synonym coverage of a 5.

4 / 5

Distinctiveness Conflict Risk

Naming "the Daytona platform" and its SDK/API/CLI gives a clear niche, and the description is unlikely to trigger for unrelated skills. However, the generic trigger terms 'sandbox', 'isolated runtime', and 'secure compute' overlap with other cloud-sandbox or code-execution tools a user might invoke generically without naming Daytona, fitting 'Mostly distinct; minor overlap risk with closely related skills' rather than the minimal-conflict 5.

4 / 5

Total

16

/

20

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

relative_links

Relative link issues: 32 deeper-than-1-level

Warning

Total

15

/

16

Passed

Repository

Arize-ai/phoenix

Path

.agents/skills/daytona/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.