CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

finding-report

Interpret finding verdicts, preserve evidence fields and present justified severity and remediation.

Quality

76%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./packages/decepticon/decepticon/skills/standard/finding_reporter/finding-report/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

86%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body is a tight, well-structured rulebook for reporting findings: verdict-specific treatments, exact field preservation/completion lists, and canonical document requirements, with no wasted tokens. Its only weakness is that parts of the executable detail (CVSS scoring, completion, handoff) are delegated to an external workflow not bundled here.

DimensionReasoningScore

Conciseness

The 28-line body is lean and assumes Claude's competence; every line adds non-obvious domain rules (e.g., "A verified negative result remains coverage, not a vulnerability") with no padding or generic explanation. Clearly matches the 5 anchor; nothing to trim and no over-explanation to drop it to 4.

5 / 5

Actionability

Concrete instruction-only guidance: per-verdict treatments in a table, exact fields to preserve and complete (severity_rationale, cvss_vector, cvss_score, cwe, mitre, remediation_priority), a named section list, and "Cite exact paths". Not 5 because CVSS scoring mechanics, completion, and handoff are delegated to an external "selected workflow" not present in this bundle, leaving minor execution gaps.

4 / 5

Workflow Clarity

The flow is coherent and unambiguous: read the verdict, apply its treatment, then produce/update the canonical document with the specified fields and sections. Not a destructive or batch operation, so the validation cap does not apply; not 5 because step ordering is implicit and checkpoints like completion/handoff are deferred to the selected workflow rather than stated.

4 / 5

Progressive Disclosure

Under 50 lines, self-contained, with no bundle files and no buried or nested references; the body is organized into clear sections (Verdict handling, Canonical document). Per the rubric guideline, a short self-contained skill with well-organized sections matches the 5 anchor.

5 / 5

Total

18

/

20

Passed

Description

58%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description is concise and specific about the skill's actions in the finding-reporting niche, but it omits any "Use when..." trigger guidance and natural trigger terms, leaving the "when" side to the metadata. Adding an explicit trigger clause with natural user phrasings would raise both completeness and trigger term quality.

Suggestions

Append an explicit trigger clause to the description, e.g., "Use when reporting a verified or unverified finding, assigning CVSS/severity, writing remediation, or handling FIND- identifiers" — this lifts completeness past the 3 cap.

Include natural user phrasings and synonyms in the description ("report a finding", "finding write-up", "CVSS score", "remediation steps") so trigger term quality covers how users actually ask.

Mention the CVSS/scoring capability in the description itself, since it is a core concrete action currently only visible in the body.

DimensionReasoningScore

Specificity

"Interpret finding verdicts", "preserve evidence fields", and "present justified severity and remediation" list several concrete domain-specific actions. Not 5 because coverage has minor gaps (e.g., CVSS scoring and finding write-up phrasing appear only in the body/metadata); not 3 because more than 1-2 actions are named.

4 / 5

Completeness

The "what" is clear (interpret verdicts, preserve evidence, present severity/remediation), but the description contains no "Use when..." clause or equivalent trigger guidance; the when-to-use text lives only in metadata.when_to_use. Per the rubric guideline, a missing "Use when..." caps completeness at 3.

3 / 5

Trigger Term Quality

Relevant keywords like "finding verdicts", "severity", "remediation", and "evidence" are present, but common natural phrasings ("report a finding", "write up a finding", "CVSS") and their synonyms are missing from the description itself. Not 4 because the keyword set is thin for users who would naturally invoke this skill.

3 / 5

Distinctiveness Conflict Risk

"Finding verdicts", "evidence fields", and "justified severity and remediation" signal a clear security finding-reporting niche with mostly distinct triggers. Not 5 because there is minor overlap risk with adjacent reporting/severity skills and the description lacks explicit trigger phrasing to fully disambiguate.

4 / 5

Total

14

/

20

Passed

Validation

87%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 14 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

metadata_version

'metadata.version' is missing

Warning

metadata_field

'metadata' should map string keys to string values

Warning

Total

14

/

16

Passed

Repository

PurpleAILAB/Decepticon

Path

packages/decepticon/decepticon/skills/standard/finding_reporter/finding-report/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.