CtrlK
BlogDocsLog inGet started
Tessl Logo

crypto-expert

Cryptography expert for TLS, symmetric/asymmetric encryption, hashing, and key management

55

Quality

61%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./crates/openfang-skills/bundled/crypto-expert/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

72%

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body is a focused, actionable cryptography reference with concrete algorithm, library, and config choices organized into clear sections. Its main weakness is verbosity from explaining concepts Claude already knows and the absence of any sequenced workflow.

Suggestions

Trim explanatory rationale that restates known facts (e.g. why ECB leaks patterns, RSA vs Ed25519 bit-security comparisons), keeping only the directive.

If a common use case is multi-step (e.g. setting up TLS or rotating keys), add a short numbered workflow with a validation checkpoint.

DimensionReasoningScore

Conciseness

The body is well organized and mostly actionable guidance, but many bullets pad recommendations with cryptographic rationale Claude already knows (e.g. 'Ed25519 provides 128-bit security...' and the ECB pattern-leak explanation), so it is not fully lean.

2 / 3

Actionability

It gives concrete, specific, copy-pasteable guidance — named libraries (OpenSSL, libsodium, ring, RustCrypto), exact algorithms (AES-256-GCM, ChaCha20-Poly1305, Ed25519, Argon2id), and config directives ('ssl_protocols TLSv1.3', 'TLS_AES_256_GCM_SHA384') — which is actionable for an instruction-only skill.

3 / 3

Workflow Clarity

Content is logically categorized into Principles, Techniques, Patterns, and Pitfalls, but this is reference guidance rather than a sequenced multi-step process, and there are no validation checkpoints or feedback loops.

2 / 3

Progressive Disclosure

The body is under 50 lines, no external references are needed, and it is cleanly organized into well-labeled sections, satisfying the simple-skill allowance for a top score.

3 / 3

Total

10

/

12

Passed

Description

50%

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description identifies a clear, well-scoped domain but is written as a role label rather than an action/trigger statement. It lacks an explicit 'Use when...' clause, leaving the invocation context implicit.

Suggestions

Rewrite as concrete actions, e.g. 'Configure TLS, select encryption/hashing algorithms, and manage keys using audited libraries.'

Add an explicit trigger clause such as 'Use when the user asks about TLS setup, encrypting data, password hashing, or key management.'

Include natural user variations like 'passwords', 'certificates', and 'HTTPS' alongside the technical terms.

DimensionReasoningScore

Specificity

The phrase 'Cryptography expert for TLS, symmetric/asymmetric encryption, hashing, and key management' names a clear domain and several sub-areas, but uses a role noun ('expert for') rather than concrete action verbs, so it does not reach the multiple-specific-actions anchor of 3.

2 / 3

Completeness

It states what the skill covers (the crypto domains) but has no 'Use when...' clause or equivalent explicit trigger guidance, which per the guidelines caps completeness at 2.

2 / 3

Trigger Term Quality

Terms like 'cryptography', 'TLS', 'encryption', 'hashing', and 'key management' are relevant keywords a developer would say, but 'symmetric/asymmetric encryption' leans technical and common variations (passwords, certificates, HTTPS, signatures) are missing.

2 / 3

Distinctiveness Conflict Risk

The cryptography niche is fairly specific, but the broad 'expert for' framing and absence of explicit triggers mean it could still overlap with a general security or code-review skill, so it does not clearly reach the distinct-triggers anchor of 3.

2 / 3

Total

8

/

12

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository
RightNow-AI/openfang
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.