Name: fastly-ngwaf
Rating: 96.8 (1 reviews)
Author: fastly

fastly-ngwaf

Performs an internal audit of Fastly Next-Gen WAF (NGWAF) workspaces to audit that critical templated protection rules are configured and enabled. Use when auditing NGWAF workspace security posture, checking for missing or disabled login protection rules (LOGINDISCOVERY, LOGINATTEMPT, LOGINSUCCESS, LOGINFAILURE), auditing credit card validation rules (CC-VAL-ATTEMPT, CC-VAL-FAILURE, CC-VAL-SUCCESS), auditing gift card protection rules (GC-VAL-ATTEMPT, GC-VAL-FAILURE, GC-VAL-SUCCESS), or identifying potential login endpoints not covered by NGWAF rules.

1.29x

Quality

96%

Does it follow best practices?

Impact

96%

1.29x

Average score across 3 eval scenarios

Securityby

Advisory

Suggest reviewing before use

Quality

Content

92%

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

This is a strong, well-crafted skill that provides concrete, executable audit steps for NGWAF workspace security. The workflow is clearly sequenced with specific API calls, validation criteria, and error recovery. Minor weakness is the reference to a bundled script that isn't provided in the bundle, and the inline expected output section is somewhat lengthy but justified by showing both healthy and unhealthy states.

Dimension	Reasoning	Score
Conciseness	The content is lean and efficient. It doesn't explain what NGWAF is, what WAF rules do, or how APIs work. Every section serves a direct purpose—API calls, expected outputs, error handling. No unnecessary padding.	3 / 3
Actionability	Fully executable curl commands with proper headers, jq filters, and URL-encoded query parameters. The signal table is specific and complete. The jq selectors are copy-paste ready and the expected output examples show exactly what to look for.	3 / 3
Workflow Clarity	Clear 4-step sequence with logical progression (list → fetch → validate → flag gaps). Step 4 includes a conditional feedback loop (when LOGINATTEMPT is missing, search for uncovered endpoints). The error handling table provides recovery guidance for common failure modes.	3 / 3
Progressive Disclosure	The content is well-structured with clear sections, but the expected output examples are quite lengthy inline. The skill references a bundled script (./scripts/assess_ngwaf_rules.sh) and a fastly-cli skill, but no bundle files are provided, making the script reference unverifiable. API references are appropriately linked externally.	2 / 3
	Total	11 / 12 Passed

Description

100%

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

This is an excellent skill description that clearly defines a narrow, specialized domain (Fastly NGWAF auditing) with specific concrete actions and explicit trigger guidance. It uses third person voice correctly, includes an explicit 'Use when' clause with multiple detailed scenarios, and provides specific rule identifiers that serve as strong trigger terms. The description is comprehensive without being unnecessarily verbose.

Dimension	Reasoning	Score
Specificity	Lists multiple specific concrete actions: auditing templated protection rules, checking login protection rules (with specific rule names), auditing credit card validation rules, auditing gift card protection rules, and identifying uncovered login endpoints.	3 / 3
Completeness	Clearly answers both 'what' (performs internal audit of Fastly NGWAF workspaces to check critical templated protection rules) and 'when' (explicit 'Use when' clause covering multiple specific trigger scenarios including auditing security posture, checking missing/disabled rules, and identifying uncovered endpoints).	3 / 3
Trigger Term Quality	Excellent coverage of natural trigger terms users would say: 'NGWAF', 'Fastly', 'WAF', 'audit', 'login protection', specific rule codes like 'LOGINDISCOVERY', 'CC-VAL-ATTEMPT', 'GC-VAL-ATTEMPT', 'security posture', 'workspace'. These are highly domain-specific terms that users in this space would naturally use.	3 / 3
Distinctiveness Conflict Risk	Extremely distinct niche — Fastly Next-Gen WAF workspace auditing with specific rule template names. This is unlikely to conflict with any other skill given the highly specialized domain and specific rule identifiers mentioned.	3 / 3
	Total	12 / 12 Passed

Validation

100%

Warnings & errors only

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 11 / 11 Passed

Validation for skill structure

No warnings or errors.

Repository: fastly/fastly-agent-toolkit
Commit: 73af5b9

Reviewed: 13 days ago

Table of Contents

Discovery Implementation Validation

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.