CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

configuration-logging

Configure AuthCrunch diagnostic skip rules, Caddy credential redaction, and logger boundaries. Use for component/message filtering and safe credential diagnostics; authorization outcomes remain unchanged.

Quality

77%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./.codex/skills/configuration-logging/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

71%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A dense, highly actionable reference with concrete grammar, snippets, filter fields, and validation commands, and no wasted tokens on general knowledge. Its weakest area is structure: all detail lives inline in SKILL.md with no reference bundle, where a leaner overview plus reference files would fit the material better.

Suggestions

Move the 'Missing Caddy Host Extension' upstream code trace and the per-test validation inventories into a references/ file (e.g., references/host-extension.md, references/validation.md), keeping SKILL.md a concise overview with clearly signaled links.

Show the complete Caddy `format filter` encoder configuration (deleting request>headers>X-Api-Key, request>uri, resp_headers>Location) as an executable caddyfile snippet instead of describing it in prose.

For the most common task (suppressing a noisy diagnostic), add a short ordered quick-start sequence: add the skip rule, run the provided make test command, and confirm the denial/authorization outcome is unchanged.

DimensionReasoningScore

Conciseness

The body is dense, project-specific prose with no padding and no explanation of concepts Claude already knows ("Matching is case-sensitive. Exact compares the whole value, partial finds a substring..."). It is not 5 because exhaustive test-coverage enumerations ("It proves baseline noise; error-only/message-only/combined host rules remaining ineffective; selective component filtering; all matchers, case sensitivity and OR...") could be tightened.

4 / 5

Actionability

Concrete executable material throughout: a complete caddyfile snippet, the exact grammar "skip <exact|partial|prefix|suffix|regex> text <value>", a JSON example, specific encoder fields to delete (request>headers>X-Api-Key, request>uri, resp_headers>Location), and a copy-paste make test command. Not 5 because the key format filter encoder configuration is described rather than shown as a complete snippet.

4 / 5

Workflow Clarity

Topic-organized sections with explicit checkpoints ("Trace the pinned host before attempting integration", "Qualify malformed URI parsing before substituting a narrower query-only filter") and a Validation section with an executable test command. Not 5 because guidance is organized by topic rather than a sequenced workflow with explicit fix-and-retry loops.

4 / 5

Progressive Disclosure

Section headers are clear and cross-links to sibling skills (../coding-directives/references/runtime-lifecycle.md, ../configuration-ticket-providers/SKILL.md) are clearly signaled one level deep, but the skill has no bundle files of its own and inlines roughly 245 lines of deep detail. The host-extension code trace and test inventories belong in reference files so SKILL.md can serve as an overview, matching the 'content that should be separate is inline' anchor rather than the 4 anchor's 'most content is appropriately placed'.

3 / 5

Total

15

/

20

Passed

Description

75%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A solid, domain-specific description with explicit what and when clauses and good trigger-term coverage. Its main limitations are that the when-clause is compressed relative to the skill's full scope and a few natural keyword variations are missing.

DimensionReasoningScore

Specificity

"Configure AuthCrunch diagnostic skip rules, Caddy credential redaction, and logger boundaries" names the domain and three concrete actions, matching the 'several specific actions; minor gaps' anchor. It is not the 5 anchor because body capabilities like URL/query redaction and authentication-event diagnostics are absent from the description.

4 / 5

Completeness

Both 'what' (three concrete capabilities) and 'when' ("Use for component/message filtering and safe credential diagnostics") are explicit, so it clears the 3 cap. Not 5 because the when-clause is compressed, overlaps the what-list, and omits scenarios like auth-event diagnostics and URL redaction rather than giving fully concrete trigger phrases.

4 / 5

Trigger Term Quality

Terms like "skip rules", "credential redaction", "logger", "component/message filtering", and "diagnostics" alongside the product names AuthCrunch/Caddy give good keyword coverage of what a user in this domain would say. Not 5 because common variations such as 'suppress messages', 'redact', or 'log noise' are missing.

4 / 5

Distinctiveness Conflict Risk

The AuthCrunch/Caddy diagnostic-filtering and redaction niche has distinct triggers and minimal conflict risk with unrelated skills. Not 5 because the referenced sibling skills (configuration-authorization, configuration-ticket-providers) indicate some overlap risk within the same skill suite.

4 / 5

Total

16

/

20

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

relative_links

Relative link issues: 4 suspicious

Warning

Total

15

/

16

Passed

Repository

greenpau/caddy-security

Path

.codex/skills/configuration-logging/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.