CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

asim-itp-validation-troubleshooter

Diagnoses GitHub Actions runs for the ASIM ingestion-time parser validation workflow. Use when a user provides a run URL or ID, asks why an ITP target was missed or failed, or needs exact evidence-based remediation without automatic code changes.

Quality

95%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Low

Low-risk findings worth noting

SKILL.md
Quality
Evals
Security

Quality

Content

100%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body is an exemplary operationally dense skill: exact commands, paths, stage order, KQL failure signatures, and an output template, all assuming Claude's competence. Workflow sequencing includes explicit validation and evidence-limitation checkpoints, and the single reference file is well-signaled and one level deep.

DimensionReasoningScore

Conciseness

Every section encodes workflow-specific knowledge Claude would not have (evidence priority order, ordered stage list, case-sensitive path formats, "Zero targets with changed sample data commonly means a misspelled or mis-cased parser directory") with no padding and no explanation of concepts Claude already knows like GitHub Actions or KQL basics. Not 4 because no sentence can be identified as over-explanation to trim.

5 / 5

Actionability

The collector invocation is copy-paste ready with backtick continuation and enumerated optional parameters, and guidance is exact throughout: "Parsers/ASim<Schema>/IngestTimeParsers/<Parser>.yaml", the Sample Data fixture path format, concrete KQL examples like "| project-rename EventProduct = DeviceProduct", and the ordered stage list. Not 4 because the common failure cases are covered with specific, executable detail rather than minor gaps.

5 / 5

Workflow Clarity

The 7-step investigation workflow is clearly sequenced with explicit validation checkpoints: step 1 verifies run identity, "Do not diagnose from the PR's current Files changed view until comparing its current head SHA" guards against stale evidence, and "If artifact download fails... continue with job logs and explicitly state the evidence limitation" provides an error-recovery path. Not 4 because checkpoints and recovery loops are explicit rather than implicit.

5 / 5

Progressive Disclosure

The body stays a lean overview and cleanly offloads detail: "Read [failure-catalog.md](references/failure-catalog.md) for stage semantics, common signatures, and remediation patterns" points to a real, well-organized 165-line reference that itself contains no further bundle-file references, and the referenced scripts/Get-AsimItpValidationDiagnostics.ps1 exists at the exact path used in the command. One level deep, clearly signaled, easy navigation.

5 / 5

Total

20

/

20

Passed

Description

87%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong description in third-person voice that explicitly covers what the skill does and when to use it, with three concrete trigger scenarios and a behavioral boundary (no automatic code changes). The only minor gap is missing common synonyms such as "CI" or "build failure" among the trigger terms.

DimensionReasoningScore

Specificity

"Diagnoses GitHub Actions runs for the ASIM ingestion-time parser validation workflow" plus "asks why an ITP target was missed or failed" and "exact evidence-based remediation" name several concrete actions in a precisely defined domain. Not 3 because it goes beyond 1-2 generic actions; not 5 because the capability list is narrower than the comprehensive multi-action anchor example.

4 / 5

Completeness

"Diagnoses GitHub Actions runs for the ASIM ingestion-time parser validation workflow" explicitly states what it does, and "Use when a user provides a run URL or ID, asks why an ITP target was missed or failed, or needs exact evidence-based remediation" gives concrete trigger phrases for when. Clearly matches the anchor requiring both what and when with concrete triggers, not the anchor-4 case where the when-clause is generic.

5 / 5

Trigger Term Quality

"run URL or ID", "why an ITP target was missed or failed", and "GitHub Actions runs" are natural phrases users would say. Not 5 because common synonyms and variations such as "CI", "build failure", or "parser validation failed" are absent.

4 / 5

Distinctiveness Conflict Risk

Terms like "ASIM ingestion-time parser validation workflow" and "ITP target" define a clear niche with distinct triggers that no generic CI-debugging or coding skill would match. Minimal conflict risk.

5 / 5

Total

18

/

20

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository

Azure/Azure-Sentinel

Path

.github/skills/asim-itp-validation-troubleshooter/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.