CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

cli-policy-audit

Inspect audit logs, manage access policies, view telemetry data, and review request history from the CLI. Filter by event type, user, or time range for compliance workflows.

Quality

64%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./skills/cli-policy-audit/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

50%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body is a clean, well-sectioned CLI command reference with no padding, but its examples are placeholder-only duplicates of the headings, flag semantics and expected outputs are unexplained, and destructive policy operations lack any validation guidance. Detail that belongs in a reference file is fully inlined, leaving no progressive disclosure layer.

Suggestions

Replace placeholder-only examples with one realistic invocation per command family (real query strings, timestamps, and a sample of expected output) and document flag value formats (e.g., accepted --format and --period values).

Add validation steps for destructive/batch operations — e.g., review with `policy get <id>` before `policy delete <id>`, and confirm scope before `policy import --overwrite` — and a short export-then-review workflow for compliance audits.

Trim the duplicate example blocks (or fold them into the flag tables) and move the full flag reference for rarely used subcommands into a references/ file, keeping SKILL.md as an overview with clearly signaled links.

DimensionReasoningScore

Conciseness

There is no padded prose or explanation of known concepts, but every "Example" block merely duplicates the subcommand heading's syntax with placeholders (e.g., ```omniroute audit search <query>```), adding no information — roughly 40% of the body could be trimmed. Not 4: the wasted duplicate examples are more than minor; not 2: nothing over-explains concepts Claude already knows.

3 / 5

Actionability

Command syntax and flag names are concrete, but no example uses realistic values or shows expected output, flag semantics are unexplained ("--format <f>", "--period <p>", "--kind <k>"), and "policy create --file <path>" gives no indication of the policy file format — key details are missing, matching the 'some concrete guidance but incomplete' anchor. Not 4: gaps exceed minor; not 2: the syntax listings are specific and runnable in form.

3 / 5

Workflow Clarity

Per-command syntax is unambiguous and grouped coherently by command family, but there is no multi-step guidance at all, and destructive operations ("policy delete <id>" with only a "--yes" flag; "policy import <file>" with "--overwrite") have no validation/verification steps — the rubric's destructive-operation cap limits this to 3. Not 2: the reference structure is not incoherent and each command is clearly delineated.

3 / 5

Progressive Disclosure

Section structure is clear and hierarchical, but the body is ~230 lines of full CLI flag reference inlined in SKILL.md with no bundle files or pointers to separate references — matching the anchor example of '[200 lines of API reference that could be in a separate file]'. Not 4: there is no offloading of detail to clearly signaled reference files at all; not 2: headers and grouping make navigation straightforward.

3 / 5

Total

12

/

20

Passed

Description

62%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A solid, third-person description that clearly states multiple concrete capabilities and filtering options, but it lacks an explicit 'Use when...' trigger clause and omits the tool name, limiting trigger precision and distinctiveness. It sits comfortably above mediocre but below the exemplar descriptions.

Suggestions

Add an explicit trigger clause, e.g., "Use when the user asks about audit trails, access-policy changes, or compliance log review with omniroute."

Name the tool (omniroute) in the description to distinguish it from generic CLI logging/telemetry skills.

Include natural synonyms users would say — "compliance audit", "log analysis", "audit trail" — to broaden trigger coverage.

DimensionReasoningScore

Specificity

Lists several concrete capability areas — "Inspect audit logs", "manage access policies", "view telemetry data", "review request history" — plus concrete filtering dimensions ("Filter by event type, user, or time range"), matching the 'several specific actions with minor gaps' anchor. Not 5: verbs remain high-level (inspect/manage/view) with no fine-grained actions (e.g., 'export audit logs to CSV'); not 3: well beyond 1-2 actions and coverage is broad.

4 / 5

Completeness

The 'what' is clear (inspect logs, manage policies, view telemetry, review history, filter by event type/user/time), but 'when' is only weakly implied by "for compliance workflows" with no explicit 'Use when...' clause — the judging guidelines cap completeness at 3 in that case. Not 4: the trigger guidance is implicit, not explicit.

3 / 5

Trigger Term Quality

Natural keywords a compliance user would say are present: "audit logs", "access policies", "telemetry", "request history", "compliance workflows". Not 5: common synonyms and variations are missing (e.g., 'compliance audit', 'log analysis', 'audit trail', 'log search').

4 / 5

Distinctiveness Conflict Risk

The audit-logs + policies + telemetry combination is somewhat niche, but "from the CLI" names no tool (omniroute is absent from the description) and would overlap with generic log/telemetry CLI skills (e.g., cloud provider CLIs). Not 4: overlap with closely related logging/monitoring skills is plausible; not 2: the domain combination is more specific than a generic 'helps with documents' example.

3 / 5

Total

14

/

20

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository

diegosouzapw/OmniRoute

Path

skills/cli-policy-audit/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.