CtrlK
BlogDocsLog inGet started
Tessl Logo

customize

Adapt this C/C++ ASAN vulnerability pipeline to a different vulnerability class, target shape, language, or detection mechanism. Use when the user wants to port, migrate, retarget, customize, or fork the pipeline for something other than C/C++ memory-safety bugs — web apps, smart contracts, deserialization, ML systems, or any other domain.

73

Quality

89%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Passed

No findings from the security scan

SKILL.md
Quality
Evals
Security

Quality

Content

85%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A well-sequenced, highly actionable customization workflow with strong validation checkpoints and concrete file/command guidance. Main weakness is monolithic structure with no progressive disclosure to separate reference files despite containing sizable lookup tables.

Suggestions

Move the 'axes of variation' and 'architecture map' tables into a reference file (e.g. references/architecture.md) and link to them from the body to improve progressive disclosure.

Tighten the Round 1/Round 2 interview prose — the option enumerations can be condensed without losing the adaptive prompting intent.

Consider a brief inline pointer to a worked example of one completed domain port, kept in references/, so the body stays a lean overview.

DimensionReasoningScore

Conciseness

Information-dense and assumes Claude's intelligence (no basic ASAN/PDF-style primers), but the interview rounds and axes-of-variation prose run long and could be tightened in places.

4 / 5

Actionability

Highly concrete: specific file paths to read and edit, an architecture-map table marking each file's disposition, and copy-paste-ready validation commands (bin/vp-sandboxed run ..., cat results/.../judge_log.jsonl, ./scripts/setup_sandbox.sh).

5 / 5

Workflow Clarity

Clear STEP 1–5 sequence with explicit checkpoints: read before asking, present plan and "Wait for explicit approval", then a thorough validate stage with six confirmation checks and a re-confirm feedback loop if the plan is adjusted.

5 / 5

Progressive Disclosure

Well-sectioned single file, but it is monolithic (~130 lines) with sizable inline reference material (axes-of-variation list and the architecture-map table) that could live in separate reference files; no bundle files exist to offload detail.

3 / 5

Total

17

/

20

Passed

Description

95%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong, third-person description that clearly states both capability and trigger conditions with concrete domain examples and natural synonyms. Only minor room for improvement in distinguishing the listed verbs as genuinely separate actions.

DimensionReasoningScore

Specificity

Names the domain and several concrete adaptation axes ("vulnerability class, target shape, language, or detection mechanism") plus concrete verbs (port, migrate, retarget, customize, fork), but the verbs are near-synonyms of one action rather than a breadth of distinct operations.

4 / 5

Completeness

Explicitly answers both what ("Adapt this C/C++ ASAN vulnerability pipeline to a different vulnerability class, target shape, language, or detection mechanism") and when ("Use when the user wants to port, migrate, retarget, customize, or fork the pipeline for something other than C/C++ memory-safety bugs") with concrete trigger phrases.

5 / 5

Trigger Term Quality

Comprehensive natural-term coverage including synonyms users actually say ("port, migrate, retarget, customize, or fork") plus concrete domain triggers (web apps, smart contracts, deserialization, ML systems).

5 / 5

Distinctiveness Conflict Risk

Targets a very specific niche (retargeting a particular C/C++ ASAN pipeline) with distinct triggers and minimal overlap risk with other skills.

5 / 5

Total

19

/

20

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository
anthropics/defending-code-reference-harness
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.