CtrlK
BlogDocsLog inGet started
Tessl Logo

memory-safe-migration

Guide secure migration of code from memory-unsafe languages (C, C++, Assembly) to memory-safe languages (Rust, Go, Java, C#, Swift). Use when migrating or rewriting legacy C/C++ code, designing FFI boundaries between safe and unsafe code, writing new modules in existing C/C++ codebases, reviewing mixed-language projects, planning memory safety roadmaps, or when an AI agent is about to generate new C/C++ code that could be written in a memory-safe language instead. Also triggers on CISA/NSA memory safety compliance discussions.

72

Quality

89%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Passed

No findings from the security scan

SKILL.md
Quality
Evals
Security

Quality

Content

78%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A well-organized, mostly lean workflow skill with concrete commands, a sequenced migration process, validation checklist, and properly split one-level-deep references. Minor gains available from trimming basic-concept restatements and adding an explicit fix-and-retry loop.

Suggestions

Add an explicit feedback loop after Step 5 validation (e.g. 'If any check fails, fix the issue and re-run validation before proceeding') to reach the top workflow-clarity anchor.

Trim restatements of knowledge Claude already has, such as 'C uses return codes, Rust uses Result, Go uses multiple returns', keeping only the actionable mapping guidance.

Include one short inline code example for a common migration pattern (e.g. a validated FFI wrapper) so the most frequent case is copy-paste ready without opening a reference.

DimensionReasoningScore

Conciseness

Mostly lean and dense with actionable bullets, but a few lines restate knowledge Claude already has (e.g. 'C uses return codes, Rust uses Result, Go uses multiple returns'), which could be trimmed.

4 / 5

Actionability

Gives a concrete executable command (python scripts/assess-migration.py --file) and specific FFI rules, but defers most code patterns to references rather than including copy-paste examples inline.

4 / 5

Workflow Clarity

A clear six-step sequence with an explicit validation checklist in Step 5, but lacks an explicit error-recovery feedback loop ('if validation fails, fix and re-run') that the top anchor requires.

4 / 5

Progressive Disclosure

Clear overview body with well-signaled one-level-deep references to real bundle files (language-selection, ffi-security, migration-patterns, assessment-checklist) and a script, all listed again in a References section.

5 / 5

Total

17

/

20

Passed

Description

100%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong, third-person description that clearly states what the skill does and when to use it, with concrete natural-language triggers and a well-defined niche. It matches the top anchors across all four dimensions.

DimensionReasoningScore

Specificity

Lists multiple concrete actions — guide secure migration, design FFI boundaries, write new modules, review mixed-language projects, plan memory safety roadmaps — across a well-scoped domain, matching the comprehensive-coverage anchor.

5 / 5

Completeness

Explicitly answers both 'what' (guide secure migration of code from unsafe to safe languages) and 'when' with concrete 'Use when...' trigger clauses, matching the top anchor.

5 / 5

Trigger Term Quality

Natural user-facing phrases with synonyms (migrating/rewriting legacy C/C++ code, FFI boundaries, mixed-language projects, memory safety roadmaps, CISA/NSA compliance) give comprehensive coverage for this domain.

5 / 5

Distinctiveness Conflict Risk

Clear niche (memory-safe language migration) with distinct triggers like FFI boundaries and CISA/NSA compliance, giving minimal conflict risk with other skills.

5 / 5

Total

20

/

20

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository
cosai-oasis/project-codeguard
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.