CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

network-config-validation

Pre-deployment checks for router and switch configuration, including dangerous commands, duplicate addresses, subnet overlaps, stale references, management-plane risk, and IOS-style security hygiene. Use when reviewing a router or switch configuration before deployment.

Quality

89%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

High

Do not use without reviewing

SKILL.md
Quality
Evals
Security

Quality

Content

82%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A well-built, highly actionable skill: every check is backed by executable Python, the review order is explicit, and destructive/credential findings fail closed. The main improvement areas are trimming minor redundancy in the code blocks, making the re-validation feedback loop explicit, and moving bulk code into bundle files to keep SKILL.md a lean overview.

Suggestions

Make the feedback loop explicit in the Change-Window Preflight example: after fixing flagged findings, re-run the dangerous-command and duplicate-IP checks until clean before approving the change (workflow_clarity).

Trim minor redundancy in the code blocks — e.g., share a single import header or shorten the generic iter_blocks helper — so every token earns its place (conciseness).

Move the ~150 lines of check code into a scripts/ or references/ file and keep SKILL.md as a lean overview with well-signaled pointers (progressive_disclosure).

DimensionReasoningScore

Conciseness

The prose is lean and assumes competence ("Treat config validation as layered evidence, not as a complete parser"), with no padding or explanation of concepts Claude already knows. It falls short of 5 because each code block repeats its imports and the generic iter_blocks helper adds length that a tighter presentation could avoid.

4 / 5

Actionability

All four check families are given as complete, executable Python — real regex patterns, ipaddress-based overlap detection, block-scoped VTY parsing, and a runnable security-hygiene checker. The code is copy-paste ready and covers the common cases (dangerous commands, duplicate IPs, overlaps, VTY exposure, SNMP/SSH hygiene), matching the 5 anchor exactly.

5 / 5

Workflow Clarity

There is an explicit ordered sequence ("Validate in this order: 1. Destructive commands ... 5. Operational hygiene") plus verification checkpoints in the Examples section ("Confirm rollback commands and out-of-band access", "Fail closed on dangerous commands and credentials"). It is not a 5 because the validate-then-fix-then-retry feedback loop is implicit rather than an explicit re-validation step.

4 / 5

Progressive Disclosure

No bundle files exist, so the skill is self-contained by design, with clear, well-ordered sections that make navigation easy. It is not a 5 because roughly 150 lines of check code sit inline in SKILL.md where a scripts/ or references/ split would slim the overview, and the 'See Also' agent/skill entries point to resources that cannot be verified within the bundle.

4 / 5

Total

17

/

20

Passed

Description

92%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong description: it states concrete capabilities in third person, names the domain clearly, and closes with an explicit, natural 'Use when...' trigger clause. Its only weakness is keyword breadth — a few common user phrasings and synonyms are absent.

DimensionReasoningScore

Specificity

The description enumerates six concrete check categories — "dangerous commands, duplicate addresses, subnet overlaps, stale references, management-plane risk, and IOS-style security hygiene" — giving comprehensive, specific coverage of what the skill does. It is not a 4 because there are no meaningful gaps in the enumerated capabilities; it is not lower because nothing is vague or generic.

5 / 5

Completeness

Both halves are explicit: the 'what' is the enumerated pre-deployment checks, and the 'when' is a literal trigger clause — "Use when reviewing a router or switch configuration before deployment". This exactly matches the 5 anchor; a 4 would require the when-clause to be less explicit, which it is not.

5 / 5

Trigger Term Quality

Natural terms users would say are present ("router or switch configuration", "before deployment", "IOS-style"), but a few common variations are missing (e.g., "network device", "push/apply config", "ACL audit", "preflight"). Good coverage, not the synonym- and extension-level comprehensiveness of a 5, and clearly better than the partial coverage of a 3.

4 / 5

Distinctiveness Conflict Risk

The skill occupies a clear niche — pre-deployment validation of router/switch configuration — with triggers (network device config review before a change) that are unlikely to fire for unrelated skills. Overlap with a generic security-review skill is possible but minimal, matching the 5 anchor rather than the 4's 'minor overlap risk with closely related skills'.

5 / 5

Total

19

/

20

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

metadata_version

'metadata.version' is missing

Warning

Total

15

/

16

Passed

Repository

affaan-m/ECC

Path

skills/network-config-validation/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.