CtrlK
BlogDocsLog inGet started
Tessl Logo

hosted-agents

Build background agents in sandboxed environments. Use for hosted coding agents, sandboxed VMs, Modal sandboxes, and remote coding environments.

50

Quality

55%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./plugins/AI-Agents-Safe-Coding-Skills-claude/skills/hosted-agents/SKILL.md

The canonical home for this skill is hosted-agents in administrakt0r/AI-Agents-Safe-Coding-Skills

SKILL.md
Quality
Evals
Security

Quality

Content

36%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A thorough conceptual survey of hosted-agent architecture with clear sectioning and useful defaults, but it is verbose, lacks executable code or commands, omits validation checkpoints for its batch/PR operations, and references an 'Infrastructure Patterns' file that does not exist in the bundle.

Suggestions

Replace conceptual prose with concrete, copy-pasteable examples: a sample image-build script, a warm-pool config, and a GitHub app token-acquisition snippet, to lift actionability.

Trim restated background ('Hosted agents run in remote sandboxed environments...', 'Why Multiplayer Matters') that Claude already knows, to improve conciseness and token efficiency.

Add explicit validation checkpoints to the Sandbox-to-API Flow (e.g., verify branch builds, confirm token scopes before PR creation) and split the inlined implementation detail into actual one-level-deep reference files so the 'Infrastructure Patterns' link resolves.

DimensionReasoningScore

Conciseness

The body is ~280 lines of conceptual exposition restating well-known ideas (hosted agents run remotely, warm pools keep sandboxes ready, server-first frameworks enable multiple clients); much of 'Core Concepts', 'Why Multiplayer Matters', and the prose around each topic is padded restatement rather than novel guidance, matching the noticeably-verbose anchor with several unnecessary explanations.

2 / 5

Actionability

Guidance is high-level and descriptive with no executable code, commands, or concrete config (e.g., it says 'Generate GitHub app installation tokens' and 'SQLite per session works well' without showing how), leaving only minimal concrete guidance with missing execution steps.

2 / 5

Workflow Clarity

Sequences are present (the numbered 'Sandbox-to-API Flow' and bulleted image/snapshot steps), and the Guidelines section enumerates concrete defaults (30-minute cadence, block writes not reads), but there are no validation checkpoints or feedback loops for the batch/destructive operations it describes (PR creation, commits on behalf of users), which caps clarity at the present-but-checkpoints-implicit level.

3 / 5

Progressive Disclosure

The document is well sectioned and lists external links plus an 'Infrastructure Patterns' internal reference, but no bundle files exist, so the reference points to nothing on disk and detailed implementation content (image registry, warm pool, auth flows) is inlined rather than split into one-level-deep files, matching the some-structure-but-could-be-better-organized anchor.

3 / 5

Total

10

/

20

Passed

Description

75%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A concise, third-person description that pairs a clear capability statement with an explicit 'Use for' trigger list and a named platform (Modal). It is strong on distinctiveness and completeness but lists deployment contexts rather than concrete per-session actions and misses some natural synonyms.

Suggestions

Reframe the trigger list toward situations users describe (e.g., 'Use when building background coding agents that need unlimited concurrency, sandboxed execution, or multiplayer sessions') to add concrete trigger phrases.

Add a couple of natural synonyms such as 'cloud sandboxes' or 'background coding' alongside 'hosted coding agents' to broaden keyword coverage.

Mention 1-2 concrete actions the skill performs (e.g., 'design sandbox image pipelines and per-session state isolation') rather than only listing target environments.

DimensionReasoningScore

Specificity

Names the domain ('background agents in sandboxed environments') and several concrete targets (hosted coding agents, sandboxed VMs, Modal sandboxes, remote coding environments), but lists deployment contexts rather than discrete actions the skill performs, leaving minor gaps versus the comprehensive multi-action anchor at 5.

4 / 5

Completeness

It gives a clear 'what' ('Build background agents in sandboxed environments') and an explicit 'when' clause ('Use for...'), but the 'when' lists environment types rather than concrete trigger situations, so it is not the fully explicit concrete-trigger-phrases anchor at 5.

4 / 5

Trigger Term Quality

'Use for hosted coding agents, sandboxed VMs, Modal sandboxes, and remote coding environments' covers good natural phrasing and a named platform (Modal), but misses common synonyms users would say such as 'cloud sandboxes' or 'background coding' and offers no file-extension-style equivalents; a few natural terms are missing.

4 / 5

Distinctiveness Conflict Risk

The niche (hosted/sandboxed background agents) is fairly distinct and unlikely to fire for unrelated skills, but 'remote coding environments' is broad enough to risk minor overlap with adjacent skills like multi-agent-patterns or tool-design.

4 / 5

Total

16

/

20

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

15

/

16

Passed

Repository
administrakt0r/AI-Agents-Safe-Coding-Skills
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.