CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

harden

VPS security auditing and hardening

52

Quality

65%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Medium

Suggest reviewing before use

Fix and improve this skill with Tessl

tessl review fix ./src/skills/bundled/harden/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

61%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body is well-structured and token-efficient, but it describes hardening actions rather than providing executable commands, and it lacks validation checkpoints for destructive operations. Adding concrete shell commands and verify-steps would materially improve it.

Suggestions

Provide executable shell commands or script references for each 'fix' action (e.g. the actual apt/ufw/fail2ban/sshd commands) rather than only naming them.

Add explicit validation checkpoints, such as re-running 'audit' after 'fix' and confirming each check passes before reporting success.

Document a safe rollback or 'dry-run' verification flow so destructive changes can be reviewed before application.

DimensionReasoningScore

Conciseness

The body is lean, using short command lists and tables with no padding or explanation of concepts Claude already knows; only minor trimming possible.

4 / 5

Actionability

Commands and pass criteria are named, but no actual executable shell commands or scripts are shown for the hardening actions, leaving key execution details missing.

3 / 5

Workflow Clarity

Audit/fix/emergency/report subcommands give a rough sequence, but there are no validation or verification checkpoints for these destructive batch operations, capping the score at 3.

3 / 5

Progressive Disclosure

Content is well-organized into clear sections (Commands, Options, Examples, Security Checks) with no nested references; minor gaps keep it just below a 5.

4 / 5

Total

14

/

20

Passed

Description

53%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description is concise and identifies a clear niche with two concrete actions, but it omits any explicit 'when to use' trigger guidance and lacks common synonyms like 'server' or 'SSH'. It is solid but not exemplary.

Suggestions

Add an explicit 'Use when...' clause, e.g. 'Use when setting up, auditing, or hardening a VPS or remote Linux server.'

Broaden trigger terms to include natural synonyms such as 'server', 'Linux server', 'SSH', and 'firewall'.

List one or two more concrete actions (e.g. 'configures firewalls and SSH') to lift specificity toward comprehensive coverage.

DimensionReasoningScore

Specificity

The phrase 'VPS security auditing and hardening' names the domain and two concrete actions (auditing, hardening), but coverage is not comprehensive enough for a 4.

3 / 5

Completeness

The 'what' is clear (VPS security auditing and hardening), but there is no 'Use when...' clause or equivalent trigger guidance, capping completeness at 3 per the rubric.

3 / 5

Trigger Term Quality

Includes relevant natural terms ('VPS', 'security', 'auditing', 'hardening') but misses common synonyms users would say such as 'server', 'Linux', or 'SSH'.

3 / 5

Distinctiveness Conflict Risk

'VPS security auditing and hardening' carves a clear niche with minor overlap risk against general Linux administration or security skills, fitting above the midpoint.

4 / 5

Total

13

/

20

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

15

/

16

Passed

Repository

alsk1992/CloddsBot

Path

src/skills/bundled/harden/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.