CtrlK
BlogDocsLog inGet started
Tessl Logo

configuration-authentication-cookies

caddy-security authentication portal cookie Caddyfile configuration. Use when creating, reviewing, or modifying authentication portal cookie directives, cookie domains, paths, lifetimes, SameSite, insecure cookies, guessed or stripped domains, token cookie names, cookie name prefixes, access token cookie validation, or authcrunch cookie defaults.

73

Quality

90%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Passed

No findings from the security scan

SKILL.md
Quality
Evals
Security

Quality

Content

80%Weight 40%Scale 1-3

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body is a dense, executable reference for cookie directives with strong actionability and conciseness. It is weaker on workflow sequencing and progressive disclosure, since it is reference-style with inline content and external code pointers rather than a structured internal bundle.

Suggestions

Add a short numbered procedure for the common failure case (e.g. login succeeds but protected routes redirect) with an explicit validate-checklist so workflow_clarity can reach 3.

Confirm the referenced paths (caddyfile_authn_cookie.go, ../go-authcrunch/..., testdata/...) resolve from the skill location; if the skill ships without them, note they are environment-relative or move critical syntax inline.

Consider splitting the full AUTHP cookie-name reference table into a referenced file to keep the body as an overview and improve progressive_disclosure.

DimensionReasoningScore

Conciseness

Lean and dense with no padding about concepts Claude already knows; every section delivers concrete syntax, keys, or defaults that earn their tokens.

3 / 3

Actionability

Provides copy-paste-ready, executable Caddyfile blocks for both global and domain-specific forms plus concrete supported keys and valid values (e.g. 'samesite... accepts lax, strict, or none').

3 / 3

Workflow Clarity

Guidance is concrete but there is no sequenced multi-step procedure with validation checkpoints; the 'Effective Scope' section gives diagnostic heuristics rather than an explicit validate->fix->retry flow.

2 / 3

Progressive Disclosure

References to source files and fixtures are one-level pointers, but the substantive reference content lives inline and the referenced paths point outside the skill to parent-repo code rather than to a present bundle (no references/scripts/assets dirs exist).

2 / 3

Total

10

/

12

Passed

Description

100%Weight 40%Scale 1-3

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description is specific, trigger-rich, and clearly scoped to a distinct niche, with both what and when explicitly stated in third person. It is a strong model description with no padding or over-claims.

DimensionReasoningScore

Specificity

Lists many concrete actions and targets — 'creating, reviewing, or modifying authentication portal cookie directives, cookie domains, paths, lifetimes, SameSite, insecure cookies' — rather than vague language.

3 / 3

Completeness

Clearly states what ('caddy-security authentication portal cookie Caddyfile configuration') and when via an explicit 'Use when creating, reviewing, or modifying...' clause with multiple triggers.

3 / 3

Trigger Term Quality

Natural terms users would actually say are well covered: 'cookie domains, paths, lifetimes, SameSite, insecure cookies, token cookie names, cookie name prefixes, access token cookie validation'.

3 / 3

Distinctiveness Conflict Risk

Tightly scoped to caddy-security authentication portal cookie directives with distinct triggers, making overlap with other skills unlikely.

3 / 3

Total

12

/

12

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository
greenpau/caddy-security
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.