CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

linux-shell-scripting

Provide production-ready shell script templates for common Linux system administration tasks including backups, monitoring, user management, log analysis, and automation. These scripts serve as building blocks for security operations and penetration testing environments.

Quality

63%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./plugins/AI-Agents-Safe-Coding-Skills-claude/skills/linux-shell-scripting/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

50%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body is a broad catalogue of concrete, mostly executable bash templates with clear section headers, but it spends its token budget on basics Claude already knows, mislabels categories as a workflow 'Phase' sequence, inlines everything that should live in reference files, and lacks validation around its destructive operations. The script collection itself is the skill's main strength.

Suggestions

Cut the Quick Reference, Useful Commands, and Cron Format sections entirely — shebang, chmod, and cron field syntax are knowledge Claude already has; the circular 'When to Use' sentence should also go.

Split the script catalogue into references/ files (e.g. backups.md, monitoring.md, security.md) and keep SKILL.md as a short index with one representative example per category.

Add verify-before-act validation to destructive scripts (confirm the new backup exists before rotating, dry-run the find cleanup) and fix the timestamp mismatch in the basic backup's echo statement.

DimensionReasoningScore

Conciseness

The ~500-line body is mostly standard bash Claude already writes fluently (tar/rsync backups, top/df parsing, useradd, openssl enc, grep log extraction), and several sections are pure padding of basics: the Quick Reference table explaining "#!/bin/bash | Shebang for bash" and "chmod +x script.sh | Make executable", the "Cron Format: Minute(0-59) Hour(0-23)..." line, and the circular filler "This skill is applicable to execute the workflow or actions described in the overview". This is noticeably verbose with several padded sections (anchor 2); it avoids anchor 1 only because the bulk is code templates rather than prose explanations of concepts.

2 / 5

Actionability

All 20+ scripts are concrete and mostly executable — e.g. the openssl encryption script with a usage check and encrypt/decrypt branches, the cron-setup pipeline, and the uptime checker using curl flags. Minor gaps keep it below anchor 5's copy-paste-ready bar: the basic backup's echo re-computes the timestamp so the printed filename won't match the created one, backup rotation parses `ls` output, and `dpkg -l | grep -q "^ii $package"` matches partial package names. Clearly above anchor 3, which requires pseudocode or non-executable guidance.

4 / 5

Workflow Clarity

"Core Workflow" is a misnomer — "Phase 1" through "Phase 10" are parallel script categories, not a sequence, and there are no skill-level validation checkpoints. Several scripts perform destructive operations (backup rotation's `rm -r`, `find ... -exec rm -v {} \;`, rsync `--delete`) with no verify-before-delete steps, so per the guideline cap workflow clarity cannot exceed 3. Individual scripts' internal checks (id, systemctl is-active, curl --fail) keep it above anchor 2's 'validation absent'.

3 / 5

Progressive Disclosure

No bundle files exist — all ~450 lines of scripts are inlined in SKILL.md, content that clearly belongs in separate reference files (e.g. backups.md, monitoring.md) with the body acting as an index. It matches anchor 3 ('some structure but... content that should be separate is inline') rather than anchor 2 because the clear ##/### section headers do provide genuine navigability, and the simple-skill exception to score 5 does not apply to a 509-line skill.

3 / 5

Total

12

/

20

Passed

Description

62%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description states clearly what the skill provides and carries a good spread of natural task-area keywords, but it has no explicit 'when to use' trigger, omits the key 'bash' synonym, and makes a 'penetration testing' claim the content does not support. It is a serviceable description with avoidable trigger and distinctiveness weaknesses.

Suggestions

Add an explicit trigger clause, e.g. 'Use when the user asks for bash or shell scripts for Linux administration tasks such as backups, monitoring, user management, log analysis, or cron automation.'

Drop or substantiate the 'security operations and penetration testing environments' claim — no script in the skill is pentest-specific, so it misleads triggering and creates conflict risk with real security skills.

Include the synonym 'bash' (and 'cron') in the description, since every template in the body is a bash script and users will ask for 'bash scripts'.

DimensionReasoningScore

Specificity

The description lists several concrete task areas — "backups, monitoring, user management, log analysis, and automation" — under a named domain (Linux shell scripting), which goes beyond anchor 3's "1-2 concrete actions". It falls short of anchor 5 because coverage has gaps (the body also contains network, file-operation, system-info, and git scripts that the description omits) and the "security operations and penetration testing environments" claim is unsupported fluff rather than a concrete capability.

4 / 5

Completeness

The 'what' is clear: "Provide production-ready shell script templates for common Linux system administration tasks...". But there is no 'Use when...' clause or equivalent trigger guidance — the second sentence ("These scripts serve as building blocks for security operations and penetration testing environments") describes an intended audience, not when to use the skill. Per the guideline, a missing explicit trigger caps completeness at 3; it cannot be 4 without any 'when' at all, and the 'what' is too concrete for 2.

3 / 5

Trigger Term Quality

Natural phrases users would actually say are present: "shell script", "backups", "monitoring", "user management", "log analysis", "automation". It sits between anchor 3 (missing common variations) and anchor 5 (synonyms/extensions) because the most common synonym "bash" is absent even though every script in the body is bash, and "cron"/"sysadmin" variants are missing — good coverage with a few natural terms missing, matching anchor 4.

4 / 5

Distinctiveness Conflict Risk

The Linux sysadmin scripting niche is somewhat specific, but the broad five-area task list overlaps with hypothetical dedicated backup/monitoring/log-analysis skills, and the "penetration testing environments" claim invites conflicts with genuine security skills since nothing in the body is pentest-specific. This matches anchor 3 ("somewhat specific but could still overlap with similar skills") better than anchor 4, because the misleading security claim is an active collision risk, not a minor overlap.

3 / 5

Total

14

/

20

Passed

Validation

87%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 14 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

skill_md_line_count

SKILL.md is long (509 lines); consider splitting into references/ and linking

Warning

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

14

/

16

Passed

Repository

administrakt0r/AI-Agents-Safe-Coding-Skills

Path

plugins/AI-Agents-Safe-Coding-Skills-claude/skills/linux-shell-scripting/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.