CtrlK
BlogDocsLog inGet started
Tessl Logo

homelab-vlan-segmentation

Segmenting home networks into VLANs for IoT, guest, trusted, and server traffic using UniFi, pfSense/OPNsense, and MikroTik — including switch trunk config, firewall rules, and wireless SSID mapping. Use when splitting a home network into IoT, guest, trusted, and server VLANs on UniFi, pfSense/OPNsense, or MikroTik.

73

Quality

91%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Passed

No findings from the security scan

SKILL.md
Quality
Evals
Security

Quality

Content

82%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A strong, highly actionable reference with real executable configuration for all three platforms and present (if distributed) validation guidance. The main gaps are minor over-explanation of basic concepts, validation checkpoints stated globally rather than inline per platform, and a monolithic single-file structure that could benefit from splitting platform configs into reference files.

Suggestions

Trim basic concept re-explanations — e.g. the trunk-vs-access port definitions in 'Switch Trunk vs Access Ports' and the 'VLANs without firewall rules do not provide security' note in Anti-Patterns — keeping only the domain-specific guidance Claude wouldn't already know.

Embed a concrete validation checkpoint inside each platform's firewall section (e.g. 'Verify: from the IoT VLAN, ping a trusted host — it should fail') rather than consolidating testing guidance in the intro and Best Practices.

Consider splitting the UniFi, pfSense/OPNsense, and MikroTik configurations into separate reference files so SKILL.md stays a concise overview with well-signaled one-level-deep links.

DimensionReasoningScore

Conciseness

Mostly lean, executable content, but a few sections re-explain concepts Claude already knows (e.g. the trunk-vs-access port definitions and 'VLANs without firewall rules do not provide security — inter-VLAN routing is open by default'). It is not a 5 because of these minor over-explanations, and not a 3 because the bulk is genuinely earning its tokens rather than padded.

4 / 5

Actionability

Fully executable, copy-paste-ready guidance across all three platforms: real RouterOS commands for MikroTik, concrete GUI paths for UniFi, and specific interface/rule steps for pfSense/OPNsense, with concrete subnets and IPs throughout.

5 / 5

Workflow Clarity

A clear sequence exists with validation present (the intro's 'verify connectivity between segments after each step' and Best Practices' 'Test isolation after every rule change'), plus pfSense 'MUST come before' ordering notes — so the missing-validation cap does not apply. It is not a 5 because validation is stated globally rather than embedded as explicit per-step checkpoints inside each platform's configuration sequence.

4 / 5

Progressive Disclosure

Well-organized into clear sections with no nested references and a Related Skills pointer, but no bundle files exist and the entire ~300-line body is inline — the three platform configs could plausibly be split into one-level-deep reference files. It is not a 5 because content is not split across files, and not a 3 because structure and navigation are already good.

4 / 5

Total

17

/

20

Passed

Description

100%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

An exemplary description: concrete actions, comprehensive natural trigger terms across the three target platforms, explicit what-and-when guidance, and a distinct niche with negligible conflict risk. No improvements needed.

DimensionReasoningScore

Specificity

Lists multiple concrete actions — 'switch trunk config', 'firewall rules', 'wireless SSID mapping', and segmenting into named VLANs — giving comprehensive coverage of the skill's capabilities.

5 / 5

Completeness

Explicitly answers both what ('Segmenting home networks into VLANs... including switch trunk config, firewall rules, and wireless SSID mapping') and when ('Use when splitting a home network into IoT, guest, trusted, and server VLANs on UniFi, pfSense/OPNsense, or MikroTik') with concrete triggers.

5 / 5

Trigger Term Quality

Covers the natural terms users say including vendor names ('UniFi', 'pfSense/OPNsense', 'MikroTik') and segment labels ('IoT', 'guest', 'trusted', 'server') plus 'VLANs' and 'SSID', with synonyms across the three platforms.

5 / 5

Distinctiveness Conflict Risk

Occupies a clear niche (homelab VLAN segmentation on three named platforms) with distinct triggers, making conflict with other skills minimal.

5 / 5

Total

20

/

20

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

metadata_version

'metadata.version' is missing

Warning

Total

15

/

16

Passed

Repository
affaan-m/ECC
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.