CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

configuration-users

Configure static local accounts, required identity fields, trusted password imports, bcrypt API keys, roles, and stored challenge rules. Use for Caddyfile-owned users; online administration belongs to scripts-and-automation.

Quality

93%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

SKILL.md
Quality
Evals
Security

Quality

Content

93%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A high-density, code-backed reference that assumes Claude's competence, keeps its single bundle reference appropriately deep, and validates generated output through an explicit checklist and named E2E fixtures. The only gap is that the validate-and-fix loop around the fixtures is implied rather than an explicit ordered workflow.

DimensionReasoningScore

Conciseness

The body is dense with project-specific constraints Claude could not know (24-character key ids, username length 3-50, password length 8-128, the 72-byte bcrypt plaintext limit, named fixtures) and never explains concepts Claude already knows; every section earns its tokens, matching the 'lean and efficient' top anchor.

5 / 5

Actionability

Complete, copy-paste-ready Caddyfile blocks (the 'user alice' shape, the 'auth challenges' preference ladder, the secrets examples) plus an exact field grammar and precise numeric constraints give fully executable guidance covering the common cases.

5 / 5

Workflow Clarity

The 'Review Checklist' section provides an explicit validation checkpoint and the Fixtures section names the tests to verify against, but the write → validate → fix → retry loop is only implied rather than spelled out as an ordered sequence, placing this between anchors 4 and 5 but below 5.

4 / 5

Progressive Disclosure

Core Caddyfile syntax stays inline while deep hashing detail is correctly delegated to the real, existing references/password-hashing.md with a clear description of what it contains; cross-skill links are one level deep and clearly signaled, giving easy navigation with no organizational gaps.

5 / 5

Total

19

/

20

Passed

Description

92%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A tight, third-person description that enumerates concrete capabilities, provides an explicit use trigger, and even includes routing guidance to a sibling skill. The only weakness is minor: a few natural trigger variations users might say (e.g., 'local identity store', 'authentication challenges') are absent.

DimensionReasoningScore

Specificity

The description lists multiple concrete capabilities — 'static local accounts', 'required identity fields', 'trusted password imports', 'bcrypt API keys', 'roles', 'stored challenge rules' — giving comprehensive coverage of the skill's scope with no apparent gaps, matching the top anchor.

5 / 5

Completeness

It explicitly answers 'what' (the enumerated configuration capabilities) and 'when' ('Use for Caddyfile-owned users'), and adds an explicit scope boundary ('online administration belongs to scripts-and-automation'), clearly matching the top anchor with concrete trigger phrasing.

5 / 5

Trigger Term Quality

Natural terms like 'users', 'password', 'API keys', and 'roles' are present and would be said by someone configuring Caddyfile identity stores, but common variations such as 'local identity store', 'users.json', or 'authentication challenges' are missing — good coverage with a few natural terms absent, fitting the 4 anchor rather than 5.

4 / 5

Distinctiveness Conflict Risk

'Caddyfile-owned users' carves out a clear niche and the explicit pointer that 'online administration belongs to scripts-and-automation' disambiguates from the sibling skill, so the risk of triggering for the wrong skill is minimal.

5 / 5

Total

19

/

20

Passed

Validation

87%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 14 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

relative_links

Relative link issues: 7 suspicious

Warning

referenced_paths_exist

Referenced path issues: 1 missing, 1 deeper-than-1-level

Warning

Total

14

/

16

Passed

Repository

greenpau/caddy-security

Path

.codex/skills/configuration-users/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.