Name: fastly-ngwaf
Rating: 74.4 (1 reviews)
Author: fastly

fastly-ngwaf

Performs an internal audit of Fastly Next-Gen WAF (NGWAF) workspaces to audit that critical templated protection rules are configured and enabled. Use when auditing NGWAF workspace security posture, checking for missing or disabled login protection rules (LOGINDISCOVERY, LOGINATTEMPT, LOGINSUCCESS, LOGINFAILURE), auditing credit card validation rules (CC-VAL-ATTEMPT, CC-VAL-FAILURE, CC-VAL-SUCCESS), auditing gift card protection rules (GC-VAL-ATTEMPT, GC-VAL-FAILURE, GC-VAL-SUCCESS), identifying potential login endpoints not covered by NGWAF rules, or comparing attack traffic against blocked traffic to confirm enabled rules are actually blocking.

Quality

91%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

Securityby

Low

Low-risk findings worth noting

Quality

Content

90%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body is concise, highly actionable, and well-structured with a verified bundled script and clear external references. Workflow sequencing is strong with validation guidance, though the inline CLI-quirk exposition keeps it just short of a perfect progressive-disclosure split.

Suggestions

Move the extended get-vs-list output-shape and bucketing explanation (Step 5, lines 106-122) into a short reference snippet or the bundled script comments to tighten the inline body further.

Add an explicit 'verify expected vs actual' checkpoint framing in Step 3 so the validation step is stated as a checkpoint rather than implied.

Consider splitting the API References block into a references/ file if more endpoints accrue, keeping SKILL.md as a pure overview.

Dimension	Reasoning	Score
Conciseness	Lean and efficient: jump straight to executable commands and CLI quirks (100-item cap, get-vs-list output shape, missing-key-means-zero) without explaining what a WAF or templated rule is; every token earns its place.	5 / 5
Actionability	Fully executable copy-paste-ready commands throughout (workspace list, rule list with jq filters, the requests curl query, time-series get/list with required flags) and a bundled, dependency-checked shell script covering the common case.	5 / 5
Workflow Clarity	A clear 5-step sequenced audit with explicit validation signals (check .meta.total, confirm enabled==true, compare requests_attack vs requests_total_blocked), but it is a read-only audit with no batch/destructive remediation step; checkpoints are present though slightly implicit for the traffic comparison.	4 / 5
Progressive Disclosure	Well-organized sections (Quick Start, per-step workflow, Expected Output, Error Handling, API References) with the bulk logic delegated to a real bundled script (./scripts/assess_ngwaf_rules.sh, verified present) and external docs linked one level deep; minor gaps in that some longer CLI-quirk explanation sits inline rather than in a reference file.	4 / 5
	Total	18 / 20 Passed

Description

92%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description is specific, complete, and distinctive, naming concrete audit actions and explicit 'Use when' triggers tied to Fastly NGWAF concepts. Trigger term coverage is strong but slightly shy of fully comprehensive synonym coverage.

Dimension	Reasoning	Score
Specificity	Lists multiple concrete actions ('audit that critical templated protection rules are configured and enabled', 'checking for missing or disabled login protection rules', 'auditing credit card validation rules', 'identifying potential login endpoints not covered by NGWAF rules', 'comparing attack traffic against blocked traffic') with comprehensive coverage of the audit's capabilities.	5 / 5
Completeness	Explicitly answers both 'what' (audits that critical templated rules are configured and enabled) and 'when' via the 'Use when auditing NGWAF workspace security posture, checking for..., or comparing...' trigger clause with multiple concrete trigger phrases.	5 / 5
Trigger Term Quality	Strong natural keywords users would say ('auditing NGWAF workspace security posture', 'missing or disabled login protection rules', 'login endpoints') and concrete signal names, but a few natural synonyms/variations (e.g. 'WAF', 'false positives', 'PCI') are absent; coverage is good rather than comprehensive.	4 / 5
Distinctiveness Conflict Risk	Occupies a clear niche (Fastly NGWAF rule auditing) with distinctive domain-specific triggers (NGWAF workspaces, login/CC/GC validation signal names) that are unlikely to conflict with other skills.	5 / 5
	Total	19 / 20 Passed

Validation

100%

Warnings & errors only

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository: fastly/fastly-agent-toolkit
Path: skills/fastly-ngwaf/SKILL.md
Commit: d5a8062

Reviewed: 3 days ago

Table of Contents

Discovery Implementation Validation

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.