CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

sentinel-xdr-migration

Orchestrate Sentinel-to-Defender-XDR authoring and optional internal qualification through the repository's canonical workflow and deterministic tools.

Quality

67%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./.claude/skills/sentinel-xdr-migration/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

61%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body is a deliberately thin orchestration stub that is token-efficient and delegates detail cleanly to one canonical workflow file. Its weaknesses are the absence of any executable command example or inline step sequence with validation, which leaves actionability and workflow clarity at the cap of 3 for a publication/environment-write skill.

Suggestions

Inline a minimal step sequence (e.g., 1. read the canonical workflow, 2. author via `package-v3-1`, 3. validate before publish) so the core flow is visible without opening the external file.

Add one concrete example invocation of the `sentinel-xdr-migration` / PowerShell packaging entry points with expected arguments.

Add a post-write verification checkpoint (e.g., confirm publication state or re-run validation after environment writes) to satisfy the feedback-loop requirement for batch/write operations.

DimensionReasoningScore

Conciseness

The body is lean with no padding or explanations of concepts Claude already knows — every sentence directs behavior ('Use V3.1 through `package-v3-1` ... resume `workflow-state.json`, preserve disabled rules'). It is not a 5 because time-sensitive version numbers ('Use V3.1', 'package-v3-1') sit in the main flow rather than a deprecated/old-patterns section, which the guidelines penalize.

4 / 5

Actionability

Concrete guidance exists via named entry points and files ('`sentinel-xdr-migration`', '`package-v3-1`', '`workflow-state.json`') but no executable commands, syntax, or examples are given — the actual steps are fully delegated to the external workflow file, matching 'Some concrete guidance but incomplete ... missing key details'. Not a 2 because the pointers are specific rather than high-level hints; not a 4 because nothing here is copy-paste executable.

3 / 5

Workflow Clarity

No step sequence is written in the body — it delegates sequencing to 'end-to-end-migration.md' — but explicit approval checkpoints exist ('ask before optional `qualification`', 'obtain explicit approval before environment writes'), so it sits at the 'sequence present but checkpoints missing or implicit' level. The environment-write/publication operations lack a validate-after-write feedback loop, so workflow clarity is capped at 3 per the destructive/batch rule.

3 / 5

Progressive Disclosure

The skill is a short overview pointing exactly one level deep to a single canonical file ('Read and follow: `Tools\SentinelToXDRMigration\agent-workflows\end-to-end-migration.md`'), with no bundle files of its own to organize — good structure with minor gaps, matching the anchor 4. Not a 5 because the reference is a raw backtick Windows path rather than a clearly signaled link, and there is only a single heading with no navigation structure.

4 / 5

Total

14

/

20

Passed

Description

57%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description carves out a highly distinctive niche with a clear 'what', but it entirely lacks trigger guidance ('when to use') and misses the most natural keyword ('migration'), relying on internal jargon like 'qualification'. Adding a 'Use when...' clause with natural phrases would lift the two heaviest dimensions.

Suggestions

Add an explicit trigger clause, e.g. 'Use when the user asks to migrate Microsoft Sentinel rules/workbooks to Microsoft Defender XDR.'

Include natural synonyms users would say — 'migration', 'migrate Sentinel rules', 'Defender XDR migration' — alongside the product names.

Replace 'the repository's canonical workflow and deterministic tools' with 1-2 more concrete capability statements (e.g., 'packages Sentinel and XDR solutions and validates publication').

DimensionReasoningScore

Specificity

The description names the domain clearly ("Sentinel-to-Defender-XDR") and two concrete actions ("authoring and optional internal qualification"), matching the anchor 'Names domain and 1-2 concrete actions, but not comprehensive'. It is not a 4 because 'through the repository's canonical workflow and deterministic tools' is generic rather than listing several specific actions, and not a 2 because the actions named are concrete rather than minimal or generic.

3 / 5

Completeness

The 'what' is stated ("Orchestrate Sentinel-to-Defender-XDR authoring and optional internal qualification") but there is no 'Use when...' clause or equivalent trigger guidance anywhere, capping completeness at 3 per the judging guidelines. It is not a 2 because the 'what' is concrete rather than vague, and cannot be a 4 without any explicit 'when'.

3 / 5

Trigger Term Quality

It contains the core natural phrase "Sentinel-to-Defender-XDR" that a user needing this skill would say, but omits the most common natural term 'migration'/'migrate' and any synonyms or file extensions, fitting the anchor 'Some relevant keywords but missing common variations or synonyms'. Not a 4 because keyword coverage is thin beyond the product names; not a 2 because the terms present are specific natural keywords, not generic filler.

3 / 5

Distinctiveness Conflict Risk

"Sentinel-to-Defender-XDR" names an extremely specific niche with virtually no overlap risk against other skills — a user mentioning these products would unambiguously want this skill, matching the anchor 'Clear niche with distinct triggers; minimal conflict risk'.

5 / 5

Total

14

/

20

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository

Azure/Azure-Sentinel

Path

.claude/skills/sentinel-xdr-migration/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.