ac-security-sandbox

Security sandbox for autonomous coding. Use when validating commands, configuring permissions, managing allowlists, or ensuring safe execution.

Quality

70%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

Securityby

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./skills/ac-security-sandbox/SKILL.md

Quality

Content

57%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body is well-sectioned with concrete code, but suffers from repeated allowlist definitions, an unimplemented extract_commands stub, missing referenced bundle files, and no validation feedback loop for destructive operations.

Suggestions

Implement extract_commands (it is the core of validation yet currently only a comment stub) so the command-validation guidance is fully executable.

De-duplicate the allowlist: define ALLOWED_COMMANDS once and reference it from Quick Start, Layer 3, and the config block instead of restating it.

Create the referenced references/ALLOWLIST.md, PATTERNS.md, and AUDIT.md (and the missing scripts) or remove the dangling references so progressive disclosure points to real files.

Add a validate->fix->retry feedback loop for blocked destructive commands so workflow_clarity can exceed the destructive-skill cap of 3.

Dimension	Reasoning	Score
Conciseness	Mostly efficient but padded: the allowlist is repeated in Quick Start, Layer 3, and the config block, and the Operations section rehashes validate_command, matching anchor 3.	3 / 5
Actionability	Mostly executable code and config examples, but extract_commands—the core of command validation—is an unimplemented stub with only comments, a notable gap that holds it at anchor 4 rather than 5.	4 / 5
Workflow Clarity	Operations are listed as discrete steps rather than a sequenced flow, and there is no validate->fix->retry feedback loop for destructive-command handling; per the scoring notes this destructive skill is capped at 3.	3 / 5
Progressive Disclosure	A dedicated References section clearly signals files, but the referenced references/*.md and three of four scripts do not exist, and bulk allowlist/pattern content is inlined, matching anchor 3.	3 / 5
	Total	13 / 20 Passed

Description

83%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A concise, third-person description that pairs a clear purpose with an explicit 'Use when' clause and concrete trigger actions. It is strong on completeness but slightly generic in one action and could add a few more natural trigger synonyms.

Dimension	Reasoning	Score
Specificity	Lists four concrete actions ('validating commands, configuring permissions, managing allowlists, ensuring safe execution'), matching anchor 4; 'ensuring safe execution' is mildly vague, keeping it below 5.	4 / 5
Completeness	Explicitly answers both 'what' (Security sandbox for autonomous coding) and 'when' (Use when validating commands...) with concrete trigger phrases, matching anchor 5.	5 / 5
Trigger Term Quality	Good natural keywords ('validating commands', 'permissions', 'allowlists') that users would say, but a few common variations/synonyms are missing, so it sits at anchor 4 rather than 5.	4 / 5
Distinctiveness Conflict Risk	The security-sandbox-for-autonomous-coding niche is distinct with specific triggers, but 'ensuring safe execution' creates minor overlap risk with generic security skills, matching anchor 4.	4 / 5
	Total	17 / 20 Passed

Validation

87%

Warnings & errors only

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 14 / 16 Passed

Validation for skill structure

Criteria	Description	Result
frontmatter_unknown_keys	Unknown frontmatter key(s) found; consider removing or moving to metadata	Warning
referenced_paths_exist	Referenced path issues: 6 missing	Warning

	Total	14 / 16 Passed

Repository: fernandezbaptiste/Skrillz
Path: skills/ac-security-sandbox/SKILL.md
Commit: 93ed392

Reviewed: 1 day ago

Table of Contents

Discovery Implementation Validation

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.