CtrlK
BlogDocsLog inGet started
Tessl Logo

finding-protocol

Operational-tier finding template — minimal fields for sub-agent decision support. Heavyweight deliverable promotion lives in skills/decepticon/final-report.

56

Quality

63%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./packages/decepticon/decepticon/skills/shared/finding-protocol/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

77%

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body is highly actionable, offering a complete copy-paste finding template, concrete commands, and a clear single-purpose workflow. It is well-organized but slightly prose-heavy in places and keeps substantial deliverable-tier detail inline rather than progressing it out to a referenced file.

Suggestions

Tighten the opening paragraph and the CVSS-vector rationale to the essential rule ("store the CVSS v4.0 vector string alongside any numeric score") without the justifying prose.

Move the detailed deliverable-tier naming/schema explanation into the final-report skill or a referenced file, keeping only a one-line pointer here, to improve progressive disclosure.

Consider extracting the severity guide and classification-field reference into a short reference file referenced from the body, since both are lookup material rather than core workflow.

DimensionReasoningScore

Conciseness

The body is mostly efficient and well-organized with templates, a concrete command, and compact examples, but the opening paragraph restating the two-tier architecture and the CVSS-vector rationale ("the vector encodes the version and makes the score reproducible/auditable") include explanation that could be tightened. Not score 1 because it is not padded with generic concepts Claude already knows; not score 3 because several prose passages do not fully earn their tokens.

2 / 3

Actionability

It provides a complete, copy-paste-ready markdown template with every field annotated, a concrete naming convention (`findings/FIND-{NNN}.md`), an executable command (`ls findings/*.md | wc -l`), and a concrete timeline.jsonl entry. Not score 2 because the guidance is specific and directly usable rather than pseudocode or abstract; it earns score 3 as actionable instruction-only guidance.

3 / 3

Workflow Clarity

This is a single-purpose skill whose action (author the finding file from the template) is unambiguous, with sequenced post-steps (save evidence, append timeline) and a Rules checklist as guardrails. Not score 2 because there are no gaps in the stated sequence; the destructive/batch validation cap does not apply since writing a finding is neither, and the simple-skill note allows score 3 for clear, well-organized single-purpose content.

3 / 3

Progressive Disclosure

The body is divided into clearly headed sections with one-level, clearly signaled cross-skill references to skills/decepticon/final-report/SKILL.md and no nested references, but no references/scripts/assets bundle files exist and the substantial "Promotion to Deliverable Tier" section is inline material about another tier. Not score 1 because organization and navigation are sound with no deep nesting; not score 3 because meaningful content (deliverable-tier naming and schema) is inline rather than split into a referenced file.

2 / 3

Total

10

/

12

Passed

Description

50%

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description clearly conveys the skill's niche as a minimal operational finding template distinct from the deliverable tier, but it omits an explicit "Use when…" trigger clause and leans on internal jargon rather than natural user phrasing. It is concrete but not comprehensive in either actions or triggers.

Suggestions

Add an explicit trigger clause, e.g. "Use when writing, recording, or documenting a vulnerability finding (FIND-NNN), or when severity classification is needed."

Replace internal jargon ("operational-tier", "sub-agent decision support") with at least one natural user phrasing such as "record a finding" or "document a vulnerability".

Lead with the concrete action (creating a minimal FIND-NNN markdown finding) before contrasting it with the deliverable promotion that lives elsewhere.

DimensionReasoningScore

Specificity

Names the domain ("Operational-tier finding template — minimal fields for sub-agent decision support") and the promotion concept, but does not enumerate multiple concrete actions; written in third person so no voice penalty applies. Not score 1 because the language is concrete rather than vague; not score 3 because it describes what the artifact is rather than listing several specific actions.

2 / 3

Completeness

It explicitly states what the skill is (operational-tier finding template for sub-agent decision support) but provides no "Use when…" clause or equivalent explicit trigger guidance, so per the rubric completeness is capped at 2. Not score 1 because the "what" is clearly present; not score 3 because the "when" is only implied, not explicit.

2 / 3

Trigger Term Quality

"finding" and "template" are relevant keywords a user might say, but the natural verb-forms (write/record/document a finding) live in metadata.when_to_use, not the description, and the phrasing leans on jargon ("operational-tier", "sub-agent decision support"). Not score 1 because "finding" is a real natural term; not score 3 because common variations like "write finding", "severity", "document vulnerability" are absent from the description.

2 / 3

Distinctiveness Conflict Risk

It carves a niche (operational findings vs. the heavyweight deliverable) and explicitly distinguishes itself from skills/decepticon/final-report, but the acknowledged sibling skill and weak in-description triggers mean overlap with general reporting/documentation skills remains possible. Not score 1 because the niche is stated; not score 3 because the description lacks distinctive trigger phrasing that would prevent conflict.

2 / 3

Total

8

/

12

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

metadata_version

'metadata.version' is missing

Warning

Total

15

/

16

Passed

Repository
PurpleAILAB/Decepticon
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.