CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

configuration-registrations

Configure legacy signup and SQLite email-confirmed enrollment, portal selection, messaging, storage and recovery. OAuth client registration is separate.

Quality

69%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./.codex/skills/configuration-registrations/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

75%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body is a lean, information-dense configuration reference: a full Caddyfile example, precise parser and validation semantics, well-documented lifecycle and failure behavior, and a properly split one-level reference for the SQLite workflow with validation mapped to concrete fixtures. Weaknesses are minor — a hard-to-parse Purpose opening, a couple of abstract instructions, and no explicit test-run commands.

Suggestions

Rewrite the Purpose opening sentence into a clean, readable trigger sentence (it currently chains three ideas into one clause).

Make the SMTP-free local validation recipe concrete with a short copy-paste snippet for the file messaging provider setup, or link the exact section of the messaging reference.

DimensionReasoningScore

Conciseness

The body is dense with project-specific facts Claude cannot know (parser injection of `kind local`, the single-address `admin email` parser rule, first-match domain rule semantics, in-memory pending cache) with essentially no padding of known concepts. It falls short of a 5 because the Purpose opening sentence is tangled and a few Workflow Notes passages could be tightened.

4 / 5

Actionability

A complete copy-paste Caddyfile example, an exhaustive supported-lines list, precise required/defaulted field semantics, and concrete fixture paths and test names make the guidance mostly executable. Minor gaps keep it below 5: instructions like "Use a supported management path or arrange an offline import and explicit reload" and the SMTP-free local validation recipe are not copy-paste ready.

4 / 5

Workflow Clarity

The registration journey is clearly sequenced (form submission, email confirmation with time-limited passcode, dropbox commit, admin notification) with failure behavior documented (notification failure does not undo the commit, restart discards pending entries), and the Fixtures section maps validation to named tests plus a checklist of acceptance to retain. Minor gaps: no explicit operator-side sequence and no commands for running the cited tests.

4 / 5

Progressive Disclosure

The single reference (references/sqlite-workflows.md) exists, is clearly signaled in Purpose ("Read [SQLite enrollment](references/sqlite-workflows.md) for `user registration sqlite <name>`"), is one level deep, and well organized, while the body keeps the core legacy configuration inline with clean sections. Minor gaps: some Workflow Notes detail (e.g., the local file-sender validation recipe) could arguably live in a reference file.

4 / 5

Total

16

/

20

Passed

Description

50%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description names a specific niche and helpfully carves out OAuth client registration, but it lacks any "use when" trigger guidance, leans on jargon ("SQLite email-confirmed enrollment") over natural user phrasing, and ends with a vague "messaging, storage and recovery" tail that invites overlap with sibling configuration skills. It reads as a mid-level description: better than generic filler, but not a self-contained trigger.

Suggestions

Add an explicit trigger clause, e.g. "Use when configuring user signup or registration in a Caddyfile with caddy-security".

Include the natural phrases users would actually say: "user registration", "signup", "Caddyfile", "email confirmation".

Replace or contextualize the vague tail "messaging, storage and recovery" — specify what is configured (e.g., "email notification providers and identity store dropboxes") or drop it to reduce conflict with the configuration-messaging and identity-store skills.

DimensionReasoningScore

Specificity

Concrete terms like "legacy signup" and "SQLite email-confirmed enrollment" name the domain specifically, but there is only one action verb ("Configure") and the tail "messaging, storage and recovery" is context-free phrasing that borders on fluff, leaving it between the 3 and 4 anchors rather than listing several distinct concrete actions.

3 / 5

Completeness

The "what" is clear (configure legacy signup, SQLite enrollment, portal selection, etc.), but there is no "Use when..." clause or equivalent explicit trigger guidance, which caps completeness at 3 per the judging guidelines.

3 / 5

Trigger Term Quality

Relevant keywords appear ("signup", "enrollment", "portal", "registration"), but the most natural user phrases are missing ("user registration", "Caddyfile", "email confirmation", "account creation") and "SQLite email-confirmed enrollment" is technical jargon rather than natural language.

3 / 5

Distinctiveness Conflict Risk

The niche is somewhat specific and "OAuth client registration is separate" explicitly disambiguates one confusion, but "messaging, storage and recovery" overlap closely related sibling skills (e.g., configuration-messaging, identity-store configuration), so it could still trigger for the wrong skill.

3 / 5

Total

12

/

20

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

referenced_paths_exist

Referenced path issues: 3 missing, 3 deeper-than-1-level

Warning

Total

15

/

16

Passed

Repository

greenpau/caddy-security

Path

.codex/skills/configuration-registrations/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.