CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

data-handling-template

Data handling plan generator — evidence retention, encryption, chain-of-custody, compliance frameworks (GDPR / HIPAA / PCI-DSS / SOC2).

Quality

73%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./packages/decepticon/decepticon/skills/standard/soundwave/data-handling-template/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

75%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The content is a strong, tightly written instruction-only skill: a clear 5-step workflow, concrete defaults and field-level schema detail, an explicit validation checklist, and an anti-patterns section. Minor gaps — no example output JSON, no error-recovery loop after validation, and slight schema-table duplication — keep it just below top marks.

DimensionReasoningScore

Conciseness

The body is lean and assumes competence — it never explains what GDPR or encryption is — with concrete tables instead of prose. It is not 5 because the DataClass fields are listed twice (inline in the data_classes row and again in the dedicated DataClass table), a small redundancy that could be trimmed.

4 / 5

Actionability

Guidance is highly concrete: specific defaults ("retention: 7 days", "Default 90 days", "/workspace/<engagement>/evidence/"), exact field names, a full schema table, and a validation checklist. It is not 5 because there is no example plan/data-handling.json document showing a complete valid output.

4 / 5

Workflow Clarity

Five clearly sequenced steps are followed by an explicit Validation Checklist and an anti-patterns section that functions as error avoidance, matching anchor 4. It is not 5 because there is no feedback loop instructing what to do when a checklist item fails before writing the output.

4 / 5

Progressive Disclosure

Sections are well-organized with no bundle files to reference, and the inline schema table is appropriately central to the single output artifact. It is not 5 because the body exceeds the under-50-lines simple-skill threshold and the document schema section could arguably live in a separate reference file.

4 / 5

Total

16

/

20

Passed

Description

61%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description is specific and domain-distinct with strong natural keywords including the compliance framework names, but it omits any explicit 'Use when...' trigger guidance, which caps completeness at 3. Several natural trigger phrases (PII handling, retention policy, evidence storage) exist in the frontmatter's when_to_use metadata but are absent from the description itself.

Suggestions

Append an explicit trigger clause to the description, e.g. "Use when the user asks for a data handling plan, retention policy, evidence storage rules, PII handling, or mentions GDPR / HIPAA / PCI-DSS / SOC2 compliance."

Promote the natural trigger phrases already present in when_to_use ("retention policy", "PII handling", "evidence storage") into the description itself so users searching those words match the skill.

Convert one or two topic nouns into concrete actions (e.g. "Generates data handling plans that set per-class evidence retention, encryption, and chain-of-custody rules") to lift specificity from 1-2 actions toward several.

DimensionReasoningScore

Specificity

"Data handling plan generator" names one concrete action, while "evidence retention, encryption, chain-of-custody, compliance frameworks" are topic nouns rather than actions. It matches anchor 3 (domain plus 1-2 concrete actions, not comprehensive) and not 4 because there is no list of several specific actions.

3 / 5

Completeness

The description clearly answers 'what' (a data handling plan generator covering retention, encryption, chain-of-custody, and compliance) but contains no "Use when..." clause, capping completeness at 3 per the judging guidelines. It is not 4 because 'when' is only weakly implied by the topic nouns.

3 / 5

Trigger Term Quality

"evidence retention", "encryption", "chain-of-custody", and the framework names (GDPR / HIPAA / PCI-DSS / SOC2) are natural terms users would say, giving good keyword coverage. It is not 5 because common variations like "PII handling", "retention policy", or "evidence storage" appear only in the when_to_use metadata, not the description.

4 / 5

Distinctiveness Conflict Risk

"Data handling plan generator" plus specific compliance frameworks carves out a clear niche with mostly distinct triggers, though it could overlap with general compliance or security-planning skills. Not 5 because it lacks explicit distinct trigger phrases that would fully separate it from related skills.

4 / 5

Total

14

/

20

Passed

Validation

87%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 14 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

metadata_version

'metadata.version' is missing

Warning

metadata_field

'metadata' should map string keys to string values

Warning

Total

14

/

16

Passed

Repository

PurpleAILAB/Decepticon

Path

packages/decepticon/decepticon/skills/standard/soundwave/data-handling-template/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.