CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

axiom-audit-networking

Use when the user mentions networking review, deprecated APIs, connection issues, or App Store submission prep.

Quality

67%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./axiom-codex/skills/axiom-audit-networking/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

70%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body is a strong, highly actionable audit procedure with excellent sequencing and built-in verification checkpoints (grep-then-read, evidence requirements, false-positive list). Its weaknesses are mild redundancy (Phase 1 vs Phase 2 pattern lists, padded rationale asides) and a monolithic structure that inlines a 10-pattern catalog that would fit better in a bundled reference file.

Suggestions

Move the Phase 2 detection-pattern catalog (10 patterns with search/issue/fix details) into a references/detection-patterns.md file, keeping a one-line summary table in SKILL.md that links to it.

Deduplicate the Phase 1 Step 1 framework-identification greps against the Phase 2 patterns — a single shared list, or trimming Step 1 to framework-discovery terms only, would cut ~15 lines.

Trim narrative rationale asides (e.g., 'users walking between rooms or buildings', 'generate support tickets and 1-star reviews') to keep the Phase 3/4 tables purely operational.

DimensionReasoningScore

Conciseness

The body is mostly dense, operational content (grep patterns, severity tables, exclusion globs), but includes tightening opportunities: the Phase 1 Step 1 grep list substantially duplicates the Phase 2 detection patterns, rationale asides like '40% of connection failures happen during WiFi-to-cellular transitions — users walking between rooms or buildings' pad the Phase 3 table, and the 'Tool Use Is Mandatory' section restates standard tool-use behavior. This fits 'Mostly efficient but includes some unnecessary explanation or could be tightened' — below score 4's 'minor instances', above score 2's 'several unnecessary explanations' since most sections earn their tokens.

3 / 5

Actionability

Nearly every detection pattern ships a copy-pasteable search string ('SCNetworkReachabilityCreateWithName', regex '[0-9]{1,3}\.[0-9]{1,3}...', 'Read 30 lines after each match') plus concrete exclusion globs and a full output template. Minor gaps keep it below score 5: fixes are described in prose ('Fix: Use NWConnection waiting state') without code examples, and checks like 'check for self. without [weak self]' leave the verification mechanics to judgment rather than a concrete procedure.

4 / 5

Workflow Clarity

The five phases are explicitly sequenced with validation checkpoints: Phase 1 requires producing and presenting the Networking Architecture Map 'before proceeding', Phase 2 mandates Read verification of every grep match before reporting ('grep patterns have high recall but need contextual verification'), Phase 3 requires evidence ('don't speculate without reading the code'), and a False Positives checklist guards over-reporting. As a read-only audit there is no destructive/batch operation requiring a fix-retry loop, so no cap applies; this matches 'Clear sequence with explicit validation steps... checklists for complex processes'.

5 / 5

Progressive Disclosure

Section headers and phases are well organized, but the ~270-line body is monolithic: the 10-pattern detection catalog in Phase 2 and the cross-reference/compound tables are reference-style content that could live in a references/ file, leaving SKILL.md as a lean overview. There are no bundle files at all, so nothing is offloaded — matching 'Some structure but could be better organized; content that should be separate is inline' rather than score 4's 'most content appropriately placed'.

3 / 5

Total

15

/

20

Passed

Description

47%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description has solid trigger-term coverage and a distinct niche, but it is only half a description: it says when to use the skill without ever saying what the skill does. Adding a concrete action clause (e.g., 'Audits Swift/Objective-C networking code for deprecated APIs and connection anti-patterns') would fix the main weakness.

Suggestions

Add an explicit 'what' clause before the 'Use when...' trigger, e.g., 'Audits iOS networking code (Swift/Obj-C) for deprecated APIs (SCNetworkReachability, CFSocket, NSStream) and connection anti-patterns that cause App Store rejections.'

Include natural trigger synonyms users actually say, such as 'App Store rejection', 'reachability', 'socket', or 'connection failures', to broaden keyword coverage.

Keep the description in third person and avoid implying the skill fixes issues — it is an auditor; stating 'detects/reports' prevents users invoking it expecting rewrites.

DimensionReasoningScore

Specificity

The description names the domain areas ("networking review, deprecated APIs, connection issues, or App Store submission prep") but lists zero concrete actions — there is no verb describing what the skill actually does (e.g., audits, scans, detects). This matches the anchor 'Names the domain but actions are minimal or generic'; it is above score 1 because the domains named are specific rather than pure abstract language, and below score 3 because even 1-2 concrete actions are absent, not merely incomplete.

2 / 5

Completeness

Only the 'when' half is present ("Use when the user mentions...") with no 'what' — the description never states what the skill does when invoked. This exactly matches the score 2 anchor 'only when is present without what'. It cannot be score 3 (which requires a clear 'what' with weak 'when') or score 4/5 (which require both halves).

2 / 5

Trigger Term Quality

Four natural trigger phrases are present ("networking review", "deprecated APIs", "connection issues", "App Store submission prep") that users would plausibly say. A few natural terms are missing (e.g., 'App Store rejection', 'reachability', 'socket', file extensions like .swift), matching the anchor 'Good keyword coverage; a few natural terms missing' rather than score 5's comprehensive synonym coverage, and clearly above score 3's 'missing common variations'.

4 / 5

Distinctiveness Conflict Risk

The trigger set carves out a fairly distinct iOS networking-audit niche with minimal overlap risk. It is not score 5 because "deprecated APIs" and "App Store submission prep" are broad enough to also fire for closely related skills (general API deprecation audits, other App Store readiness skills), matching the anchor 'Mostly distinct; minor overlap risk with closely related skills'.

4 / 5

Total

12

/

20

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository

CharlesWiltgen/Axiom

Path

axiom-codex/skills/axiom-audit-networking/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.