CtrlK
BlogDocsLog inGet started
Tessl Logo

policy

Inspect the per-workspace tool-policy overlay (.lha/policies.jsonl) that gates destructive or sensitive tool calls, and tell the user what to change if they want a rule added or removed.

57

Quality

65%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./core/python/long-horizon-harness/horizon/builtin_skills/policy/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

67%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body is well-structured, actionable, and assumes Claude's competence, with concrete JSON examples and a clear worked example. Its main weakness is repetition of the write-restriction constraint and some overlap between the seed/classifier sections, which slightly hurts conciseness.

Suggestions

State the '.lha/* cannot be written by the agent' constraint once in a prominent place and refer back to it, instead of restating it in the Default seed, Add-rule, Remove-rule, Worked example, and Notes sections.

Consolidate the 'Default seed' and 'Demotable destructive commands' sections, which both describe what the seed and argv classifier cover, to remove overlap.

Fold the read-back parse-validation step explicitly into the 'add a rule' workflow as a numbered checkpoint rather than relegating it to Notes.

DimensionReasoningScore

Conciseness

The content is mostly efficient and assumes Claude's intelligence, but the '.lha/* cannot be written by the agent' constraint is restated across the Default seed, Add-rule, Remove-rule, Worked example, and Notes sections, and the Default-seed and Demotable-commands sections overlap — fitting 'mostly efficient but includes some unnecessary explanation or could be tightened' rather than the trim 4 anchor.

3 / 5

Actionability

Concrete, copy-paste-ready JSON rule examples and a full worked example ('block npm publish') cover the common add/remove cases; the illustrative read(".lha/policies.jsonl") notation is not a real tool call, leaving minor gaps that keep it just below the fully-executable 5 anchor.

4 / 5

Workflow Clarity

Sequenced workflows (list rules → add rule → remove rule) with checkpoints — 'Confirm the target with them first' and the Notes 'read the file back after they save it' validation — give clear sequence with most checkpoints present; it is not 5 because validation is not woven as explicit numbered steps into each workflow.

4 / 5

Progressive Disclosure

Well-organized with clear section headers and one-level-deep, clearly-signaled references to docs/security-model.md and docs/permission-model.md; no bundle files exist so structure is self-contained. Minor organization gaps (some inline detail that could be split) keep it just below the cleanly-split 5 anchor.

4 / 5

Total

15

/

20

Passed

Description

62%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description is specific and distinctive, clearly scoping a narrow policy-inspection niche. Its main weakness is the missing explicit 'Use when...' trigger guidance and limited natural keyword coverage, which cap completeness and trigger quality.

Suggestions

Append an explicit 'Use when...' clause with concrete trigger phrases, e.g. 'Use when the user asks what policies are in force, or wants to block or unblock a specific command or path.'

Add natural synonyms users would actually say ('block a command', 'add/remove a policy rule', 'what is allowed') to broaden trigger-term coverage.

DimensionReasoningScore

Specificity

Names the domain and several concrete actions — 'Inspect the per-workspace tool-policy overlay', 'gates destructive or sensitive tool calls', 'tell the user what to change if they want a rule added or removed' — which matches 'lists several specific actions; minor gaps in coverage' rather than the fully comprehensive 5 anchor.

4 / 5

Completeness

There is a clear 'what' (inspect overlay, tell user what to change) but no explicit 'Use when...' trigger clause — the guideline caps completeness at 3 when such guidance is absent; it is not the 2 anchor because the 'what' is specific, not vague.

3 / 5

Trigger Term Quality

Relevant keywords are present ('tool-policy', 'destructive or sensitive tool calls', 'rule added or removed') but natural user phrasings and synonyms ('block a command', 'what policies are in force', '.lha/policies.jsonl') are missing, fitting 'some relevant keywords but missing common variations' rather than the 4 anchor's good coverage.

3 / 5

Distinctiveness Conflict Risk

Targets a very specific niche (per-workspace tool-policy overlay gating destructive tool calls) with distinct triggers and minimal overlap risk, matching the 'clear niche with distinct triggers; minimal conflict risk' anchor.

5 / 5

Total

15

/

20

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository
google/adk-samples
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.