managing-tls-certificates
Manages TLS certificates for CockroachDB clusters including CA certificate configuration, client certificate authentication, certificate rotation, and troubleshooting SSL/TLS connection errors. Use when setting up client certificate auth, resolving SSL connection failures, rotating certificates, or configuring mTLS for CDC changefeeds.
94
92%
Does it follow best practices?
Impact
Pending
No eval scenarios have been run
Advisory
Suggest reviewing before use
Quality
Discovery
100%Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.
This is an excellent skill description that clearly defines its scope, lists concrete actions, includes natural trigger terms, and has an explicit 'Use when' clause. The CockroachDB-specific context combined with TLS certificate management creates a well-defined niche that is easy to distinguish from other skills.
| Dimension | Reasoning | Score |
|---|---|---|
Specificity | Lists multiple specific concrete actions: CA certificate configuration, client certificate authentication, certificate rotation, troubleshooting SSL/TLS connection errors, and configuring mTLS for CDC changefeeds. | 3 / 3 |
Completeness | Clearly answers both 'what' (manages TLS certificates including CA config, client cert auth, rotation, troubleshooting) and 'when' with an explicit 'Use when...' clause listing four specific trigger scenarios. | 3 / 3 |
Trigger Term Quality | Includes strong natural keywords users would say: 'TLS certificates', 'CockroachDB', 'CA certificate', 'client certificate auth', 'SSL connection failures', 'certificate rotation', 'mTLS', 'CDC changefeeds'. These cover both common and domain-specific terms users would naturally use. | 3 / 3 |
Distinctiveness Conflict Risk | Highly distinctive due to the narrow niche of CockroachDB TLS certificate management. The combination of CockroachDB-specific terms (CDC changefeeds) and TLS/SSL certificate operations makes it very unlikely to conflict with other skills. | 3 / 3 |
Total | 12 / 12 Passed |
Implementation
85%Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.
This is a strong, well-structured skill that covers a complex topic with clear decision routing, executable commands, and appropriate progressive disclosure. The workflow clarity is excellent with validation steps, rollback procedures, and safety considerations. Minor verbosity in explanatory sentences could be trimmed, but overall the content is highly actionable and well-organized.
| Dimension | Reasoning | Score |
|---|---|---|
Conciseness | The skill is mostly efficient with concrete commands and minimal fluff, but includes some unnecessary explanatory text (e.g., 'Client certificate auth provides mutual TLS (mTLS) — the client proves its identity via certificate instead of a password' and 'The CA certificate is required by clients to verify the cluster's identity') that Claude already knows. The overall length is reasonable for the scope but could be tightened. | 2 / 3 |
Actionability | Provides fully executable commands throughout — openssl commands for certificate generation, cockroach cert commands, ccloud CLI commands, SQL for changefeeds, and diagnostic commands. All examples are copy-paste ready with clear placeholder syntax. | 3 / 3 |
Workflow Clarity | Multi-step processes are clearly sequenced with numbered steps, explicit validation checkpoints (e.g., 'Verify connections work with the new certificate', certificate chain verification commands, SIGHUP reload), and the rotation workflows include feedback loops. The decision tree at the top clearly routes users to the correct section. The safety considerations table and rollback section add important guardrails. | 3 / 3 |
Progressive Disclosure | Well-structured with a clear overview, decision routing, and four distinct parts. References to external files (connection-examples.md, troubleshooting.md) are one level deep and clearly signaled. Related skills and official documentation are organized in a dedicated References section. The inline content is appropriately scoped with detailed troubleshooting deferred to a reference file. | 3 / 3 |
Total | 11 / 12 Passed |
Validation
100%Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.
Validation — 11 / 11 Passed
Validation for skill structure
No warnings or errors.
- Repository
- cockroachlabs/cockroachdb-skills
- Commit
84bc1e4
- Reviewed
Table of Contents
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.