CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

debug-openshell-cluster

Debug why an OpenShell gateway deployment is unhealthy, unreachable, or unable to create sandboxes. Use for gateway health failures, Docker/Podman runtime issues, Helm failures, Kubernetes scheduling, TLS or auth, gateway interceptors, supervisor middleware startup or runtime failures, external compute-driver sockets, VM drivers, or sandbox startup. Trigger keywords - debug gateway, gateway failing, deployment failing, helm install failing, cluster health, gateway health, gateway not starting, health check failed, sandbox pending, docker driver, podman driver, kubernetes driver, external driver, compute driver socket, gateway interceptor, supervisor middleware, middleware failed, vm driver.

Quality

81%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

SKILL.md
Quality
Evals
Security

Quality

Content

60%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body is exceptionally actionable — every step is backed by executable commands and concrete symptom-to-cause mappings — and the diagnostic workflow is well sequenced. Its dominant failure is structural: a ~100 KB monolith that buries dozens of deep-dive subsystems inline instead of splitting them into one-level-deep reference files, which also destroys token efficiency.

Suggestions

Move the deep-dive subsystem material into one-level-deep reference files — e.g. references/postgres-mutation-locks.md (advisory-lock contention, pg_locks queries, termination guidance), references/kubernetes-tls-certmanager.md (cert-manager, SPIRE/SPIFFE, BackendTLSPolicy), and references/openshift-scc.md — leaving SKILL.md with the workflow, primary commands, and pointers, mirroring the existing supervisor-middleware.md pattern.

Convert the longest prose findings (Docker/Podman common-findings bullets, the runtime-initiated control-connection explanation) into the existing symptom | likely cause | check table format, which conveys the same content in a fraction of the tokens.

Cap the body at a lean overview (workflow steps, per-step primary checks, and the failure-patterns table) and push per-platform detail (Steps 4–7) into references/docker.md, references/podman.md, references/kubernetes.md, and references/vm.md so only the active platform's detail is loaded.

DimensionReasoningScore

Conciseness

The 1343-line body is severely over token budget: the PostgreSQL advisory-lock treatment (~150 lines), the cert-manager/SPIRE/BackendTLSPolicy deep dive (~120 lines), and per-platform corporate-proxy sections each run far past what a SKILL.md body should carry. The content is dense and product-specific rather than padded with concepts Claude already knows, which keeps it above anchor 1, but the volume of inlineable-but-inlined detail is far beyond "some unnecessary explanation".

2 / 5

Actionability

Fully executable throughout: copy-paste-ready kubectl/helm/docker/podman/journalctl commands, jsonpath and SQL snippets, stat checks, and TOML greps, each paired with concrete "Common findings" mappings from observed output to cause and fix (e.g. the Docker step's findings list and the CDI refresh repair sequence).

5 / 5

Workflow Clarity

A clear ordered diagnostic sequence with an explicit stop condition ("Run diagnostics in order and stop once the root cause is clear"), per-step findings, a symptom→cause→check failure-patterns table, and a Reporting checklist. It falls short of anchor 5 because within Step 3 and Step 6 the sprawl buries the checkpoints, and error recovery is implicit in findings lists rather than explicit validate→fix→retry loops.

4 / 5

Progressive Disclosure

The single reference (supervisor-middleware.md, 54 lines) is clearly signaled, but ~1300 lines of material that clearly belongs in separate reference files are inlined — the advisory-lock section, the OpenShift/cert-manager material, and the per-platform proxy sections would each be a natural references/ file. Section headers and tables provide structure, keeping it above a monolithic wall, but the inlining relative to a 54-line reference bundle is severe.

2 / 5

Total

13

/

20

Passed

Description

95%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong description: concrete what, explicit use-when clause with realistic trigger scenarios, and a comprehensive natural-language keyword list. The only mild weakness is that a single action verb ("Debug") carries the whole capability statement, with the breadth expressed as domain enumeration rather than distinct actions.

DimensionReasoningScore

Specificity

"Debug why an OpenShell gateway deployment is unhealthy, unreachable, or unable to create sandboxes" names a concrete action with three concrete failure conditions, and enumerates specific focus areas ("TLS or auth", "Helm failures", "Kubernetes scheduling", "external compute-driver sockets"). It falls short of anchor 5 because the only distinct action verb is "Debug" — the remainder is an enumeration of domains rather than multiple separate concrete actions.

4 / 5

Completeness

It explicitly answers both questions: the "what" is stated first ("Debug why an OpenShell gateway deployment is unhealthy, unreachable, or unable to create sandboxes") and the "when" is an explicit "Use for..." clause with concrete trigger scenarios. Voice is third person throughout.

5 / 5

Trigger Term Quality

The explicit keyword list ("debug gateway, gateway failing, deployment failing, helm install failing, cluster health, gateway health, gateway not starting, health check failed, sandbox pending, docker driver, podman driver, kubernetes driver, ... vm driver") covers natural phrases a user would actually say, including variations and synonyms across all supported platforms.

5 / 5

Distinctiveness Conflict Risk

The description is anchored to a specific product ("OpenShell gateway") with niche-specific triggers ("compute driver socket", "gateway interceptor", "supervisor middleware"), giving a clear niche with minimal risk of triggering for unrelated skills.

5 / 5

Total

19

/

20

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

skill_md_line_count

SKILL.md is long (1348 lines); consider splitting into references/ and linking

Warning

Total

15

/

16

Passed

Repository

NVIDIA/OpenShell

Path

skills/debug-openshell-cluster/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.