CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

conops-template

Concept of Operations document creation — executive summary, threat actor profiling, attack narrative, kill chain design, communication plan, deconfliction.

Quality

75%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./packages/decepticon/decepticon/skills/standard/soundwave/conops-template/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

71%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A lean, well-sequenced instruction skill with concrete schemas, explicit content rules, and a validation checklist. Its main weakness is bundle organization: the provided kill-chain-templates.md reference is orphaned while the body points at sibling skills outside the bundle, and the deprecation guidance is repeated more than needed.

Suggestions

Link references/kill-chain-templates.md from the kill-chain design section (e.g., 'Use the Engagement Type → Phase Selection table in references/kill-chain-templates.md') so the bundled reference is discoverable instead of relying on sibling skills outside the bundle.

Consolidate the thrice-repeated communication_plan deprecation into a single statement (Generation Rules) and drop the redundant rows/mentions elsewhere, trimming Validation/Generation Rules overlap.

Add a brief example plan/conops.json snippet (or link one) showing the CONOPS/ThreatActor/KillChainPhase schema applied, so the output step is copy-paste ready.

DimensionReasoningScore

Conciseness

The body is efficient and operator-focused ('Don't include phases outside RoE scope. Recon-only engagement → only recon phase', 'Timeline uses absolute dates — never relative') with no padding or explanations of concepts Claude already knows. Minor trimmable redundancy: the communication_plan deprecation is stated three times ('Coordination belongs in ContactPlan; CONOPS.communication_plan is deprecated', 'communication_plan is DEPRECATED', and the schema table row), and Generation Rules partly repeat the Validation checklist.

4 / 5

Actionability

Concrete, executable guidance throughout: exact file paths ('Create or revise plan/conops.json'), full schema tables with field names, types, and allowed values ('one of recon, initial-access, post-exploit, c2, exfiltration, reporting'), and specific content rules ('All MITRE ATT&CK technique IDs are valid'). Falls short of 5 because 'select applicable phases using the active planning schema' is abstract and there is no example conops.json output showing the schema applied.

4 / 5

Workflow Clarity

Clear sequence — Prerequisites ('Read plan/roe.json first') → threat model/narrative → kill-chain design → Output → Validation — with an explicit validation checklist ('At least 2 success criteria defined'). Not 5 because there is no error-recovery feedback loop (what to do when a validation check fails) and the Output step defers to a vague 'selected planning workflow' rather than concrete publication steps.

4 / 5

Progressive Disclosure

The body is well-sectioned, but the one bundled reference file (references/kill-chain-templates.md, which contains exactly the phase-selection tables the kill-chain design section needs) is never referenced or linked. Instead the body leans on non-bundled siblings ('the tier table ... in threat-profile/SKILL.md', 'The deconfliction-template skill describes DeconflictionPlan') and warns against depending on files 'Skillogy cannot return', so the structure is present but navigation to the actual bundle is unclear.

3 / 5

Total

15

/

20

Passed

Description

71%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A specific, domain-distinct description that clearly states what the skill produces. Its weaknesses are the absence of an explicit 'Use when...' trigger clause in the description itself (triggers are only in metadata) and the omission of the 'CONOPS' acronym and related natural synonyms users would say.

Suggestions

Append a 'Use when...' clause to the description, e.g., 'Use when the user asks to create a CONOPS, design or revise an operation, or build a threat model.'

Include the 'CONOPS' acronym and common synonyms ('red team operation design', 'operation planning') in the description so natural trigger phrases match.

Drop 'communication plan' from the description or replace it with 'contact plan', since the body marks communication_plan as deprecated in favor of ContactPlan.

DimensionReasoningScore

Specificity

The description lists multiple specific concrete actions covering the document's components: 'executive summary, threat actor profiling, attack narrative, kill chain design, communication plan, deconfliction'. This matches the anchor for comprehensive coverage of specific actions; it is not the level below because coverage of the CONOPS sub-tasks is broad, not partial.

5 / 5

Completeness

The 'what' is clear (Concept of Operations document creation with named components), but the description contains no 'Use when...' clause or equivalent explicit trigger guidance — 'create CONOPS'/'plan attack' triggers live only in metadata.when_to_use, not the description. Per the judging guideline, a missing explicit trigger clause caps completeness at 3; it is not 2 because the 'what' half is fully explicit.

3 / 5

Trigger Term Quality

Good natural keywords: 'kill chain', 'threat actor', 'Concept of Operations', 'deconfliction' are terms a red-team operator would say. Missing the most common synonym — the acronym 'CONOPS' itself appears only in the name field, not the description — plus common variants like 'red team' or 'operation plan', so it falls just short of the comprehensive-synonyms anchor.

4 / 5

Distinctiveness Conflict Risk

'Concept of Operations' with 'kill chain design' and 'deconfliction' is a distinct niche with minimal conflict against generic skills. It is not 5 because the threat-modeling and deconfliction components overlap with sibling planning skills (e.g., a threat-profile or deconfliction-template skill), creating minor wrong-skill trigger risk.

4 / 5

Total

16

/

20

Passed

Validation

87%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 14 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

metadata_version

'metadata.version' is missing

Warning

metadata_field

'metadata' should map string keys to string values

Warning

Total

14

/

16

Passed

Repository

PurpleAILAB/Decepticon

Path

packages/decepticon/decepticon/skills/standard/soundwave/conops-template/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.