CtrlK
BlogDocsLog inGet started
Tessl Logo

ac-security-sandbox

Security sandbox for autonomous coding. Use when validating commands, configuring permissions, managing allowlists, or ensuring safe execution.

60

Quality

70%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./.claude/skills/ac-security-sandbox/SKILL.md

The canonical home for this skill is ac-security-sandbox in fernandezbaptiste/Skrillz

SKILL.md
Quality
Evals
Security

Quality

Content

57%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body is well-sectioned with concrete code, but suffers from repeated allowlist definitions, an unimplemented extract_commands stub, missing referenced bundle files, and no validation feedback loop for destructive operations.

Suggestions

Implement extract_commands (it is the core of validation yet currently only a comment stub) so the command-validation guidance is fully executable.

De-duplicate the allowlist: define ALLOWED_COMMANDS once and reference it from Quick Start, Layer 3, and the config block instead of restating it.

Create the referenced references/ALLOWLIST.md, PATTERNS.md, and AUDIT.md (and the missing scripts) or remove the dangling references so progressive disclosure points to real files.

Add a validate->fix->retry feedback loop for blocked destructive commands so workflow_clarity can exceed the destructive-skill cap of 3.

DimensionReasoningScore

Conciseness

Mostly efficient but padded: the allowlist is repeated in Quick Start, Layer 3, and the config block, and the Operations section rehashes validate_command, matching anchor 3.

3 / 5

Actionability

Mostly executable code and config examples, but extract_commands—the core of command validation—is an unimplemented stub with only comments, a notable gap that holds it at anchor 4 rather than 5.

4 / 5

Workflow Clarity

Operations are listed as discrete steps rather than a sequenced flow, and there is no validate->fix->retry feedback loop for destructive-command handling; per the scoring notes this destructive skill is capped at 3.

3 / 5

Progressive Disclosure

A dedicated References section clearly signals files, but the referenced references/*.md and three of four scripts do not exist, and bulk allowlist/pattern content is inlined, matching anchor 3.

3 / 5

Total

13

/

20

Passed

Description

83%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A concise, third-person description that pairs a clear purpose with an explicit 'Use when' clause and concrete trigger actions. It is strong on completeness but slightly generic in one action and could add a few more natural trigger synonyms.

DimensionReasoningScore

Specificity

Lists four concrete actions ('validating commands, configuring permissions, managing allowlists, ensuring safe execution'), matching anchor 4; 'ensuring safe execution' is mildly vague, keeping it below 5.

4 / 5

Completeness

Explicitly answers both 'what' (Security sandbox for autonomous coding) and 'when' (Use when validating commands...) with concrete trigger phrases, matching anchor 5.

5 / 5

Trigger Term Quality

Good natural keywords ('validating commands', 'permissions', 'allowlists') that users would say, but a few common variations/synonyms are missing, so it sits at anchor 4 rather than 5.

4 / 5

Distinctiveness Conflict Risk

The security-sandbox-for-autonomous-coding niche is distinct with specific triggers, but 'ensuring safe execution' creates minor overlap risk with generic security skills, matching anchor 4.

4 / 5

Total

17

/

20

Passed

Validation

87%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation14 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

referenced_paths_exist

Referenced path issues: 6 missing

Warning

Total

14

/

16

Passed

Repository
fernandezbaptiste/Skrillz
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.