CtrlK
BlogDocsLog inGet started
Tessl Logo

hosted-agents

Build background agents in sandboxed environments. Use for hosted coding agents, sandboxed VMs, Modal sandboxes, and remote coding environments.

45

Quality

48%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./plugins/AI-Agents-Safe-Coding-Skills/skills/hosted-agents/SKILL.md

The canonical home for this skill is hosted-agents in administrakt0r/AI-Agents-Safe-Coding-Skills

SKILL.md
Quality
Evals
Security

Quality

Content

31%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

This skill reads more like an architectural overview or blog post than an actionable skill for Claude. It covers a broad surface area of hosted agent infrastructure concepts but lacks the concrete, executable guidance that would make it useful—there are no code examples, no commands, no configuration snippets. The content is also notably verbose, explaining concepts Claude already understands while omitting the specific implementation details that would actually be valuable.

Suggestions

Add concrete, executable code examples for key operations: Dockerfile/image build scripts, sandbox API calls (e.g., Modal sandbox creation), git configuration commands, and SQLite session state setup.

Cut conceptual explanations Claude already knows (what multiplayer is, why sandboxes matter, what plugins do) and replace with specific implementation patterns with code.

Split detailed subsections (sandbox infrastructure, API layer, client implementations) into separate referenced files to improve progressive disclosure and reduce the monolithic structure.

Add validation checkpoints to workflows—e.g., how to verify a sandbox image built correctly, how to confirm git sync completed before allowing writes, how to validate session state isolation.

DimensionReasoningScore

Conciseness

The skill is significantly verbose, explaining many high-level architectural concepts Claude already understands (what multiplayer means, why sandboxes matter, what plugins are). Sections like 'Core Concepts' and 'Why Multiplayer Matters' add little actionable value. The 'When to Use' section is duplicated at the end. Much of the content reads like a blog post or architecture document rather than a lean skill instruction.

2 / 5

Actionability

Despite being ~250 lines, the skill contains zero executable code examples, no concrete commands, no configuration snippets, and no specific API calls. Guidance remains at the architectural/conceptual level ('Pre-build environment images', 'Take filesystem snapshots') without showing how to actually implement any of it. The closest to concrete guidance is mentioning SQLite per session and git config updates, but even these lack implementation details.

2 / 5

Workflow Clarity

The Sandbox-to-API Flow section provides a clear 4-step sequence, and the image registry pattern describes a logical workflow. However, most processes lack explicit validation checkpoints or error recovery steps. For infrastructure involving sandboxes and deployments (potentially destructive/batch operations), the absence of validation steps is notable. The overall structure presents concepts but doesn't provide clear step-by-step workflows with verification.

3 / 5

Progressive Disclosure

No bundle files are provided despite references to 'Infrastructure Patterns - Detailed implementation patterns' and multiple related skills. The skill is a monolithic document with ~250 lines of content that would benefit from splitting into separate files (sandbox setup, API layer, client implementations). References to other skills exist but none are actual files, making navigation impossible.

2 / 5

Total

9

/

20

Passed

Description

65%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description has a clear 'Use for...' clause with specific trigger scenarios and mentions distinctive technologies like Modal sandboxes, which aids in skill selection. However, the 'what' portion is weak—'Build background agents' is a single vague action that doesn't convey the range of concrete capabilities the skill provides. Adding specific actions (e.g., configure, deploy, monitor, debug) would significantly improve specificity.

Suggestions

Expand the 'what' clause with concrete actions beyond just 'Build', e.g., 'Build, configure, deploy, and manage background agents in sandboxed environments'.

Add more trigger term synonyms such as 'cloud dev environments', 'containerized agents', 'headless coding agents', or 'remote execution environments' to improve discoverability.

DimensionReasoningScore

Specificity

The description names the domain ('background agents in sandboxed environments') but the action 'Build' is singular and generic. It doesn't list concrete actions like 'configure VM images', 'deploy containers', 'manage agent lifecycles', etc.

2 / 5

Completeness

Has both 'what' (build background agents in sandboxed environments) and 'when' ('Use for hosted coding agents, sandboxed VMs, Modal sandboxes, and remote coding environments'). The 'when' clause is present and lists specific scenarios, though the 'what' could be more detailed about specific capabilities.

4 / 5

Trigger Term Quality

Includes several relevant trigger terms: 'background agents', 'sandboxed environments', 'hosted coding agents', 'sandboxed VMs', 'Modal sandboxes', 'remote coding environments'. These are reasonably natural terms a user might use, though it could include more synonyms like 'cloud dev environments', 'containerized agents', or 'headless agents'.

4 / 5

Distinctiveness Conflict Risk

The combination of 'background agents' and 'sandboxed environments' is fairly distinctive. Mentioning specific technologies like 'Modal sandboxes' helps differentiate it. Minor overlap risk with general VM/container management or general coding agent skills.

4 / 5

Total

14

/

20

Passed

Validation

90%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation10 / 11 Passed

Validation for skill structure

CriteriaDescriptionResult

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

10

/

11

Passed

Repository
administrakt0r/AI-Agents-Safe-Coding-Skills
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.