CtrlK
BlogDocsLog inGet started
Tessl Logo

configuration-logging

Configure AuthCrunch diagnostic skip rules and explain the Caddy middleware logger boundary. Use for component/message filtering; access logs and authorization outcomes are separate concerns.

66

Quality

83%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

SKILL.md
Quality
Evals
Security

Quality

Content

82%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A highly actionable, information-dense skill: exact config grammar, concrete code and JSON examples, named implementation entry points, and an explicit validation command with per-test expectations. Its weaknesses are mild — topic-based rather than sequenced presentation without an error-recovery loop, and host-internals depth that could be moved to reference files.

DimensionReasoningScore

Conciseness

The body is dense with project-specific facts ("skip exact text 'token validation error'", "Duplicate logging blocks, header arguments, nested blocks, empty tokens ... are rejected with location-aware errors") and explains nothing Claude already knows. Minor trims are possible in the exhaustive malformed-input enumerations and the multi-line host-internals trace, placing it between the efficient and lean anchors, closer to 4.

4 / 5

Actionability

Fully executable throughout: a copy-paste Caddyfile block, the exact four-token grammar ("skip <exact|partial|prefix|suffix|regex> text <value>"), the native JSON form, concrete file and function names (caddyfile_logging.go, NewLoggingConfigFromDirectives, TestCaddyLoggingE2E), and a runnable make test command. Not anchor 4 because no pseudocode or missing key details were found.

5 / 5

Workflow Clarity

The Configuration section shows exactly what to write and the Validation section supplies an explicit test command, what each test proves, and future acceptance criteria ("require error-text-only suppression of missing-token errors while malformed-token errors from the same logger remain"). It is organized by topic rather than sequence and lacks an explicit fix-and-retry error-recovery loop, so it does not reach the anchor-5 checklist/feedback-loop level.

4 / 5

Progressive Disclosure

Four well-organized sections with one-level-deep links to sibling skills (e.g., ../scripts-and-automation/SKILL.md#local-go-authcrunch-development); no bundle files exist, so nothing is nested. The ~35-line host-extension internals and exhaustive validation-test inventory are deep inline material that could live in reference files, keeping it below the ideal split of anchor 5.

4 / 5

Total

17

/

20

Passed

Description

78%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong, third-person description with two concrete named actions, an explicit "Use for" trigger clause, and a sharp scope boundary. Keyword coverage is good but omits common synonyms like "log filtering" or "suppress", and the when-clause could name a couple more concrete trigger phrases.

DimensionReasoningScore

Specificity

Two explicit concrete actions ("Configure AuthCrunch diagnostic skip rules", "explain the Caddy middleware logger boundary") name a specific product and config object, and the scope is delimited ("access logs and authorization outcomes are separate concerns"). More concrete than the anchor-3 example but only two actions where anchor 5 expects comprehensive capability coverage, so it sits between anchors 3 and 4, noticeably above the midpoint.

4 / 5

Completeness

The description clearly states what it does and includes an explicit "Use for component/message filtering" trigger clause plus a negative scope statement. The when-clause is thinner than anchor 5's concrete multi-phrase trigger example, so it fits the both-present-but-could-be-more-explicit anchor.

4 / 5

Trigger Term Quality

"component/message filtering", "diagnostic", "skip rules", and "access logs" are natural phrasings a user would say. Missing common variations such as "log filtering", "suppress", "silence", or "token validation error", matching the good-coverage-with-a-few-missing-terms anchor rather than the comprehensive anchor 5.

4 / 5

Distinctiveness Conflict Risk

It names AuthCrunch and Caddy and targets a narrow niche (diagnostic skip rules, middleware logger boundary) that no generic skill would claim, giving a clear niche with distinct triggers and minimal conflict risk.

5 / 5

Total

17

/

20

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

relative_links

Relative link issues: 2 suspicious

Warning

Total

15

/

16

Passed

Repository
greenpau/caddy-security
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.