CtrlK
BlogDocsLog inGet started
Tessl Logo

healthcheck

Host security hardening and risk-tolerance configuration for Bitterbot deployments. Use when a user asks for security audits, firewall/SSH/update hardening, risk posture, exposure review, Bitterbot cron scheduling for periodic checks, or version status checks on a machine running Bitterbot (laptop, workstation, Pi, VPS).

72

Quality

88%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Medium

Suggest reviewing before use

SKILL.md
Quality
Evals
Security

Quality

Content

77%

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body is highly actionable with a clear, well-validated workflow for a risky host-hardening task, but it is somewhat redundant across sections and monolithic where progressive disclosure into reference files would help. Strengths are concrete commands and explicit checkpoints; weaknesses are token efficiency and file structure.

Suggestions

Dedupe repeated guidance — the model self-check, the 'Bitterbot does not change host firewall/SSH/OS updates' caveat, and the confirmation lists each appear in multiple places; state each once and cross-reference.

Move large inline reference material (the cron-scheduling procedure, memory-write format, full context-gathering prompt bank) into separate reference files under ./references/ and link to them one level deep, keeping SKILL.md a lean overview.

Tighten verbose phrasing in Core rules and the periodic-checks section to assume Claude's competence and cut tokens that restate workflow steps.

DimensionReasoningScore

Conciseness

Mostly lean and directive, but several points are repeated across sections (model self-check in Core rules and Section 0; 'never claim Bitterbot changes firewall/SSH' at lines 18, 88, 214; overlapping confirmation lists), so it could be tightened.

2 / 3

Actionability

Provides exact, copy-paste-ready commands (uname -a, ss -ltnup, ufw status, bitterbot security audit --deep [--fix] [--json], bitterbot cron add|list|runs|run), stable cron names, numbered execution options, and a strict CLI flag allowlist — fully concrete guidance for an instruction-only skill.

3 / 3

Workflow Clarity

A clear 0–8 ordered workflow with read-only context gathering first, explicit validation re-checks in Section 8, rollback/access-preservation planning, and a 'stop on unexpected output' feedback loop for destructive firewall/SSH/port operations.

3 / 3

Progressive Disclosure

Well-organized into clear sections, but as a ~240-line single file it inlines substantial detail (context-gathering prompts, full cron-scheduling procedure, memory-write format) that could be split into one-level-deep reference files rather than kept monolithic.

2 / 3

Total

10

/

12

Passed

Description

100%

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description is specific, complete, and well-triggered: it names concrete actions, includes an explicit 'Use when...' clause with natural keywords, and is clearly scoped to Bitterbot host hardening. Voice is correctly third person with no over-claims.

DimensionReasoningScore

Specificity

Lists multiple specific concrete actions (host hardening, security audits, firewall/SSH/update hardening, cron scheduling, version status checks) rather than vague language.

3 / 3

Completeness

Clearly states what it does ('Host security hardening and risk-tolerance configuration for Bitterbot deployments') and when to use it via an explicit 'Use when...' clause with detailed triggers.

3 / 3

Trigger Term Quality

Good coverage of natural terms users would say — 'security audits', 'firewall/SSH/update hardening', 'version status checks' — alongside hardware contexts (laptop, workstation, Pi, VPS).

3 / 3

Distinctiveness Conflict Risk

Scoped to a clear niche (Bitterbot deployments / machines running Bitterbot) with distinct triggers, making conflict with other skills unlikely.

3 / 3

Total

12

/

12

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository
Bitterbot-AI/bitterbot-desktop
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.