CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

hybrid-cloud-networking

Configure secure, high-performance connectivity between on-premises and cloud environments using VPN, Direct Connect, and ExpressRoute.

Quality

66%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./plugins/AI-Agents-Safe-Coding-Skills/skills/hybrid-cloud-networking/SKILL.md

The canonical home for this skill is hybrid-cloud-networking in administrakt0r/AI-Agents-Safe-Coding-Skills

SKILL.md
Quality
Evals
Security

Quality

Content

57%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body is well-organized reference material with largely executable snippets, but it reads as an inline encyclopedia rather than an actionable workflow: steps are generic with no validation checkpoints, and every referenced file (vpn-setup.md, direct-connect.md, implementation-playbook.md) is missing from the bundle. Filler sections and duplicated Terraform also dilute token efficiency.

Suggestions

Fix or remove the dangling references: references/vpn-setup.md, references/direct-connect.md, and resources/implementation-playbook.md do not exist in the bundle.

Replace the generic "Instructions" section with a concrete sequenced workflow with explicit checkpoints, e.g., 1) provision connection, 2) verify tunnel status via aws ec2 describe-vpn-connections, 3) confirm BGP routes propagated, 4) test throughput/latency, 5) only then cut over production traffic.

Trim filler (the repeated description line, "Do not use this skill when") and consolidate the aws_vpn_connection Terraform duplicated between the Site-to-Site VPN and High Availability sections.

DimensionReasoningScore

Conciseness

The body is mostly dense reference material (bullets, HCL, CLI commands) rather than explanation of known concepts, but it could be tightened: the frontmatter description is repeated verbatim, the "Instructions" section is generic filler ("Apply relevant best practices and validate outcomes"), "Do not use this skill when" adds nothing, and the aws_vpn_connection Terraform is duplicated between the Site-to-Site VPN and High Availability sections. This fits 'Mostly efficient but includes some unnecessary explanation or could be tightened' — not level 4, which requires only minor trims, and not level 2, since there is no extensive explanation of concepts Claude already knows.

3 / 5

Actionability

Mostly executable guidance: complete-ish Terraform for AWS VPN gateways and Azure VPN gateway, concrete CLI commands (aws ec2 describe-vpn-connections, az network vpn-connection show), specific bandwidth/SLA figures, and BGP ASN values. Minor gaps keep it below level 5: the BGP configuration block is a descriptive sketch rather than runnable config, the Azure snippet references undefined resources (azurerm_public_ip.vpn, azurerm_subnet.gateway), and several sections offer only vague imperatives ("Implement encryption for VPN tunnels", "Implement DDoS protection").

4 / 5

Workflow Clarity

"Instructions" lists steps (clarify goals, apply practices, validate) and the Monitoring/Troubleshooting section provides verification commands, but the steps are generic and there is no sequenced implementation workflow with explicit validation checkpoints (e.g., provision, verify tunnel up, confirm BGP routes, test throughput). This matches 'Steps listed but validation gaps; sequence present but checkpoints missing or implicit' — below level 4's concrete sequence with most checkpoints, above level 2 because some verification tooling is at least identified.

3 / 5

Progressive Disclosure

Section structure is clear and references are signaled at points of relevance ("**Reference:** See references/direct-connect.md", a "Reference Files" section), but scored against the actual bundle, the referenced files do not exist: there is no references/ or resources/ directory, so references/vpn-setup.md, references/direct-connect.md, and resources/implementation-playbook.md are all dangling. This sits between level 2 (broken navigation/inlined detail) and level 4 (good structure with valid mostly-clear references) — good in-file organization undermined by phantom references.

3 / 5

Total

13

/

20

Passed

Description

61%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description states a concrete, well-scoped capability with specific technologies, but it omits any explicit trigger guidance ('Use when...'), which both caps completeness and weakens its value for skill selection. Natural keywords are good but miss common synonyms like 'hybrid cloud', 'site-to-site VPN', and the cloud provider names.

Suggestions

Append an explicit trigger clause, e.g. "Use when connecting an on-premises datacenter to AWS, Azure, or GCP, or when the user mentions hybrid cloud, site-to-site VPN, Direct Connect, or ExpressRoute."

Add natural synonyms users would say: "hybrid cloud networking", "site-to-site VPN", "Cloud Interconnect", and provider names (AWS, Azure, GCP).

Optionally enumerate the concrete sub-actions (design connectivity, configure VPN/Direct Connect/ExpressRoute, set up BGP routing and redundancy) to raise specificity.

DimensionReasoningScore

Specificity

"Configure secure, high-performance connectivity between on-premises and cloud environments" names the domain and one concrete action (configure connectivity) with named technologies (VPN, Direct Connect, ExpressRoute), but does not list several distinct actions. It matches 'Names domain and 1-2 concrete actions, but not comprehensive' rather than level 4, which requires several specific actions; it is above level 2 because the technologies and target environment are concrete, not generic.

3 / 5

Completeness

The 'what' is clear (configure hybrid connectivity via VPN/Direct Connect/ExpressRoute), but there is no 'Use when...' clause or equivalent explicit trigger guidance, which caps completeness at 3 per the judging guidelines. It is not level 4 because the 'when' is entirely absent rather than merely imprecise, and not level 2 because the 'what' is concrete, not vague.

3 / 5

Trigger Term Quality

"VPN, Direct Connect, ExpressRoute" and "on-premises and cloud" are natural terms users would say when needing this skill. It falls short of level 5's comprehensive synonym coverage: common variations like "hybrid cloud", "site-to-site VPN", "Cloud Interconnect", and provider names (AWS/Azure/GCP) are absent; it is above level 3 because the included keywords are specific and natural rather than generic.

4 / 5

Distinctiveness Conflict Risk

The on-premises-to-cloud connectivity niche with named technologies (VPN, Direct Connect, ExpressRoute) is fairly distinct with clear triggers. Minor overlap risk exists with general cloud networking or terraform connectivity skills that cover similar ground; it lacks the fully distinct trigger phrasing of a level-5 example.

4 / 5

Total

14

/

20

Passed

Validation

87%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 14 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

referenced_paths_exist

Referenced path issues: 3 missing

Warning

Total

14

/

16

Passed

Repository

administrakt0r/AI-Agents-Safe-Coding-Skills

Path

plugins/AI-Agents-Safe-Coding-Skills/skills/hybrid-cloud-networking/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.