Name: asim-parser-filter-validator
Rating: 67.2 (1 reviews)
Author: Azure

asim-parser-filter-validator

Validates ASIM parser filtering parameters by running filter tests against a Log Analytics workspace. Pure PowerShell using az CLI for authentication — no Python or Azure SDK packages required. Use this skill after creating or modifying an ASIM parser to verify that its filtering parameters work correctly.

Quality

81%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

Securityby

Passed

No findings from the security scan

Quality

Content

75%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A well-structured, actionable body that leans on tables and a concrete runnable script with a clear result-interpretation procedure. Could improve by adding an explicit fix-and-rerun loop and tighter failure-reason prose.

Suggestions

Add an explicit validate-fix-rerun loop: after diagnosing a real failure, instruct to fix the parser KQL and re-run asimFilterTest.ps1 until all non-ignorable failures pass.

Tighten the 'Known acceptable failure reasons' section into a compact table to reduce token cost while preserving the decision criteria.

Show one short example of expected output (a passing and a failing line) so result interpretation is unambiguous.

Dimension	Reasoning	Score
Conciseness	Lean tables and sectioned content that assume Claude's competence without explaining ASIM concepts; the 'Known acceptable failure reasons' section is somewhat detailed but conveys specialized knowledge Claude lacks. Not a 5 because that failure-reason section could be tightened.	4 / 5
Actionability	Provides a copy-paste ready PowerShell command with real parameters, a concrete inputs table, and a troubleshooting table with specific fixes. Not a 5 because only one command variant is shown and no example output is illustrated.	4 / 5
Workflow Clarity	Clear sequence (authenticate -> run script -> interpret results -> classify failures) with an explicit decision procedure for ignoring known-acceptable failures. Not a 5 because the validate/fix/re-run recovery loop is implicit rather than enumerated.	4 / 5
Progressive Disclosure	Well-organized sections with implementation detail correctly placed in the referenced scripts/asimFilterTest.ps1 bundle file (one level deep, clearly signaled). Not a 5 because the body exceeds ~50 lines and lacks explicit 'see X for details' navigation pointers.	4 / 5
	Total	16 / 20 Passed

Description

87%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong, specific description that clearly states what the skill does and when to use it, with concrete domain trigger terms. Minor room to expand trigger synonyms and enumerate the validation actions.

Dimension	Reasoning	Score
Specificity	Names the domain ('ASIM parser filtering parameters') and several concrete actions ('running filter tests against a Log Analytics workspace', 'verify that its filtering parameters work correctly', 'Pure PowerShell using az CLI for authentication'), with only minor gaps in coverage. Not a 5 because it does not enumerate what the filter tests actually entail.	4 / 5
Completeness	Explicitly answers both 'what' ('Validates ASIM parser filtering parameters by running filter tests against a Log Analytics workspace') and 'when' ('Use this skill after creating or modifying an ASIM parser to verify that its filtering parameters work correctly') with a concrete trigger phrase. Clearly matches the score-5 anchor.	5 / 5
Trigger Term Quality	Includes natural domain terms a practitioner would say ('ASIM parser', 'filtering parameters', 'filter tests', 'Log Analytics workspace') with a concrete trigger ('after creating or modifying an ASIM parser'). Not a 5 because synonyms and common variations are limited.	4 / 5
Distinctiveness Conflict Risk	Occupies a clear niche (ASIM parser filter validation in Log Analytics) with distinct triggers and minimal overlap risk with other skills. Not a 4 because the specialization is pronounced and unambiguous.	5 / 5
	Total	18 / 20 Passed

Validation

93%

Warnings & errors only

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 15 / 16 Passed

Validation for skill structure

Criteria	Description	Result
frontmatter_unknown_keys	Unknown frontmatter key(s) found; consider removing or moving to metadata	Warning

	Total	15 / 16 Passed

Repository: Azure/Azure-Sentinel
Path: .github/skills/asim-parser-filter-validator/SKILL.md
Commit: ba5ab1c

Reviewed: 1 day ago

Table of Contents

Discovery Implementation Validation

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.