CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

asim-parser-filter-validator

Validates ASIM parser filtering parameters by running filter tests against a Log Analytics workspace. Pure PowerShell using az CLI for authentication — no Python or Azure SDK packages required. Use this skill after creating or modifying an ASIM parser to verify that its filtering parameters work correctly.

Quality

89%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

SKILL.md
Quality
Evals
Security

Quality

Content

88%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A well-crafted skill body: executable one-command guidance, clear inputs and result interpretation, and thoughtful failure-triage criteria that only a domain expert would know. The only improvements are minor — deduplicating the PowerShell/az CLI statements and the az login guidance, and no external references are needed at this size.

DimensionReasoningScore

Conciseness

The body is lean — compact tables, a single ready-to-run command, and genuinely non-obvious judgment guidance ('Known acceptable failure reasons'). It loses a point only for redundancy: the 'pure PowerShell / az CLI' claim is stated twice in the body, and 'az login' guidance appears in both Prerequisites and Troubleshooting, matching the 'efficient; minor instances of over-explanation' anchor rather than the score-5 'every token earns its place' anchor.

4 / 5

Actionability

The 'How to run' section gives a copy-paste-ready command with concrete placeholders ('.\\scripts\\asimFilterTest.ps1 -ParserFile "{PathToFilterParserKQL}" -SchemaName "{SchemaName}" -WorkspaceId "{your-workspace-guid}"'), the referenced script exists, required inputs are tabulated, and pass/fail semantics are defined — fully executable guidance covering the common case.

5 / 5

Workflow Clarity

This is a simple single-purpose skill with an unambiguous run command, and the simple-skill exception applies; moreover the sequence (authenticate → run → interpret → triage failures → troubleshoot) is explicit, with the 'Known acceptable failure reasons' section acting as a concrete failure-triage checklist (a feedback loop) and a troubleshooting table for error recovery. The skill only runs read-only queries, so the destructive/batch cap does not apply.

5 / 5

Progressive Disclosure

Well-organized single-purpose SKILL.md with sections that each earn their place and a correctly referenced bundle script (scripts/asimFilterTest.ps1, including the $AllSchemasParameters symbol cited in Troubleshooting), with no nested or buried references. It sits just above the under-50-line threshold for an automatic 5 under the simple-skill exception, so it lands on the 'good structure; minor organization gaps' anchor.

4 / 5

Total

18

/

20

Passed

Description

87%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong description: it explicitly states what the skill does and when to use it, in third person, with concrete domain-specific trigger terms. The only gaps are minor — a few natural synonym variations (KQL, Sentinel) and slightly limited action-verb breadth.

DimensionReasoningScore

Specificity

The description names the domain ('ASIM parser filtering parameters') and several concrete actions ('running filter tests against a Log Analytics workspace', 'az CLI for authentication'), but offers fewer distinct action verbs than a fully comprehensive list, matching the 'several specific actions; minor gaps' anchor rather than the score-5 anchor.

4 / 5

Completeness

Both 'what' ('Validates ASIM parser filtering parameters by running filter tests against a Log Analytics workspace') and 'when' ('Use this skill after creating or modifying an ASIM parser to verify that its filtering parameters work correctly') are explicit, with a concrete trigger phrase — the exact pattern of the score-5 anchor; not 4 because the 'when' clause is specific rather than merely present.

5 / 5

Trigger Term Quality

Good natural-term coverage for this niche ('ASIM parser', 'filtering parameters', 'Log Analytics workspace', 'creating or modifying an ASIM parser', 'verify'), but a few terms users might naturally say are missing (e.g. 'KQL', 'Microsoft Sentinel', '.kql'), placing it below the score-5 comprehensive-synonym anchor and clearly above 'some relevant keywords'.

4 / 5

Distinctiveness Conflict Risk

'ASIM parser filtering parameters' is a clear niche with distinct, domain-specific triggers that would not plausibly fire for any other skill — matching the 'clear niche with distinct triggers' anchor and exceeding the score-4 multi-domain overlap example.

5 / 5

Total

18

/

20

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

15

/

16

Passed

Repository

Azure/Azure-Sentinel

Path

.github/skills/asim-parser-filter-validator/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.