CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

common-protocol-enforcement

Enforce Red-Team verification and adversarial protocol audit. Use only when verifying completion, performing self-scans, or checking protocol violations; do not activate for ordinary implementation, configuration, or unit-test requests.

52

Quality

65%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./.agents/skills/common/common-protocol-enforcement/SKILL.md

The canonical home for this skill is common-protocol-enforcement in HoangNguyen0403/agent-skills-standard

SKILL.md
Quality
Evals
Security

Quality

Content

53%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body presents a coherent verification discipline with a real pre-completion sequence and a condition-triggered, fix-oriented self-scan — genuinely actionable as a self-reflection checklist. Its weaknesses are redundancy across the Red Flags / Rationalization / Anti-Patterns sections and reliance on undefined internal vocabulary ('Standard Defaults', 'Pre-Write Audit Log') that leaves the checkpoints unexecutable as written.

Suggestions

Define or ground the undefined terms: state what 'Standard Defaults' are (with examples) and what a 'Pre-Write Audit Log' should contain, or drop those checks in favor of self-contained criteria.

Consolidate the Red Flags, Rationalization Prevention, and Anti-Patterns sections — they repeat the same 'small changes still violate protocol' idea three times — into one section to cut roughly a third of the body.

Make the evidence checkpoint concrete: specify what counts as observable evidence (test output, diff inspection, diagnostic artifact) and how to obtain it, converting 'Ask what observable command proves the claim' into an executable verification step.

DimensionReasoningScore

Conciseness

The bullet-list style is mostly lean, but the 'small change' idea is repeated three times across sections ('Small changes hide drift', 'Tiny changes still violate guardrails', and 'No Skipping Protocols: "Small changes" are where most violations happen'), and the Red Flags / Rationalization Prevention / Anti-Patterns sections overlap heavily. Fits 'mostly efficient but could be tightened' rather than the minor-trim level above.

3 / 5

Actionability

Several steps reference undefined artifacts — 'Search for Standard Defaults where project rules should exist' and 'Missing `Pre-Write Audit Log` in thoughts' give no definition or source (no bundle files exist), so Claude cannot execute them as written. The reflective checks ('Ask what observable command or artifact proves the completion claim') are usable but incomplete, matching 'some concrete guidance but incomplete; missing key details'.

3 / 5

Workflow Clarity

A numbered 4-step pre-completion protocol and a condition-triggered self-scan with a fix loop ('Re-edit immediately if a violation is detected') provide a real sequence, but validation checkpoints are implicit — there are no pass/fail criteria or concrete verification commands, and undefined terms like 'Standard Defaults' make the checkpoints ambiguous. Fits 'steps listed but validation gaps'.

3 / 5

Progressive Disclosure

This is a compact single-file skill (~50 content lines) with no bundle files and clear section headers, so a monolithic structure is appropriate. Scored against the actual bundle structure (empty), the only organization gap is the three overlapping admonition sections that could be consolidated — 'good structure; minor organization gaps'.

4 / 5

Total

13

/

20

Passed

Description

62%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A well-scoped description with an explicit, exclusion-qualified 'when' clause — better than most at defining activation boundaries. The main weakness is an abstract 'what' that states the audit's purpose without enumerating its concrete checks, and trigger phrasing that leans on internal jargon over natural user language.

Suggestions

Replace the abstract 'what' with the concrete checks the skill performs, e.g. 'Searches for standard defaults where project rules should exist, confirms active skills were loaded before writing, and requires observable evidence (command output, diffs) before declaring a task done.'

Add natural-language trigger phrases users would actually say, such as 'check my work', 'is this really done', or 'review for violations', to complement the jargon-heavy terms like 'adversarial protocol audit'.

Clarify what 'verifying completion' concretely means (e.g., 'verifying a task-completion claim against executed commands or artifacts') to reduce overlap with ordinary code-review or test-verification skills.

DimensionReasoningScore

Specificity

Names the domain and a few actions ('verifying completion, performing self-scans, or checking protocol violations'), but these read as trigger conditions rather than concrete capabilities — the description never states what the audit actually does (e.g., searching for standard defaults, demanding evidence, checking rule loading). Fits the 'names domain and 1-2 concrete actions, but not comprehensive' anchor, not the 'several specific actions' level above.

3 / 5

Completeness

Both 'what' ('Enforce Red-Team verification and adversarial protocol audit') and 'when' are present, and the 'when' is unusually explicit with both positive triggers and exclusions ('Use only when... do not activate for ordinary implementation, configuration, or unit-test requests'). Falls short of 5 because the 'what' is a single abstract clause without concrete capability statements.

4 / 5

Trigger Term Quality

Relevant keywords are present ('verifying completion', 'self-scans', 'protocol violations', 'red-team'), but several are jargon-heavy ('adversarial protocol audit') and common natural phrases users would say ('is this done', 'check my work', 'review my changes') are missing. Matches 'some relevant keywords but missing common variations or synonyms'.

3 / 5

Distinctiveness Conflict Risk

The verification/audit niche is fairly distinct and the explicit exclusion clause reduces mis-trigger risk, but phrases like 'verifying completion' and 'task complete' (a metadata trigger) could overlap with general review or test-verification skills. 'Mostly distinct; minor overlap risk' is the best fit.

4 / 5

Total

14

/

20

Passed

Validation

87%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 14 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

metadata_version

'metadata.version' is missing

Warning

metadata_field

'metadata' should map string keys to string values

Warning

Total

14

/

16

Passed

Repository

HoangNguyen0403/agent-skills-standard

Path

.agents/skills/common/common-protocol-enforcement/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.