CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

dangerous-actions

Rosetta CRITICAL MUST skill. MUST activate when action or its consequence is potentially dangerous, potentially irreversible, potentially destructive, or HIGH RISK. MUST activate when consequence MAYBE dangerous even if action itself seems safe. This is enterprise environment — the cost of dangerous activities is EXTREMELY HIGH, recovery may be impossible, and blast radius may affect production, shared environments, or other teams. If there is even a remote chance - load the skill.

Quality

54%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./instructions/r2/core/skills/dangerous-actions/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

55%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body is admirably lean but hollow: its central mechanism (the 'hard-deny tier' requiring user approval) is referenced yet never defined, the process/exceptions numbering is broken, and there is no verification step for a skill whose entire purpose is gating destructive operations. It reads as an outline of a policy rather than executable guidance.

Suggestions

Define the 'hard-deny tier' referenced in step 4 — list which actions fall in it and what the explicit approval request must contain; the dangling 'see below' makes the approval mechanism unusable.

Fix the numbering so exceptions are bullets under a separate 'Exceptions' list rather than steps 5-7 continuing the process sequence, and add a verification checkpoint (e.g., confirm blast radius and user approval before proceeding) as required for destructive-operation skills.

Make 'Assess BLAST RADIUS' and 'Consider safer alternatives' concrete: specify what to check (affected systems, data recoverability, shared/production scope) and what a safer-alternative proposal should include.

DimensionReasoningScore

Conciseness

The ~30-line body is lean and efficient: short directives ('Assess BLAST RADIUS before execution', 'THINK THE OPPOSITE'), a compact example list, and two brief pitfalls. It assumes Claude's competence with no padding or explanations of known concepts. Matches anchor 5 — every token earns its place.

5 / 5

Actionability

Guidance is high-level hints without executable specifics: 'Assess BLAST RADIUS', 'Consider safer alternatives', and 'MUST REQUIRE EXPLICIT user approval for hard-deny tier (see below)' — yet the 'hard-deny tier' is never defined anywhere in the skill, a critical missing detail. The examples list is the only concrete element. This matches anchor 2 (high-level hints missing the specific steps), not 3, because the central approval mechanism is undefined.

2 / 5

Workflow Clarity

The sequence is incoherent: exceptions are numbered 5-7 as though they were process steps following items 1-4, and step 4 references a 'hard-deny tier (see below)' that does not exist. There is no validation or verification checkpoint despite the skill governing destructive operations (the rubric's cap-at-3 rule for destructive skills applies; the content falls below it anyway). Rough sequence with many gaps matches anchor 2.

2 / 5

Progressive Disclosure

This is an under-50-line skill with no bundle files and no need for external references; it has two clear sections (<process>, <pitfalls>) per the simple-skill exception. Minor organization gaps — XML-style pseudo-tags instead of markdown headers, and the exceptions block confusingly nested inside <process> — hold it at anchor 4 rather than 5.

4 / 5

Total

13

/

20

Passed

Description

32%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description over-invests in trigger urgency (ALL-CAPS MUST/CRITICAL, repeated activation clauses) while completely omitting what the skill actually does. Its breadth ('even a remote chance') makes it a near-universal trigger that would conflict with most other skills.

Suggestions

State what the skill does when activated, e.g., 'Assesses blast radius, requires explicit user approval, and proposes safer alternatives before executing dangerous actions' — currently the 'what' is entirely missing, capping completeness at 2.

Add concrete trigger terms users would naturally say, such as 'delete', 'force-push', 'drop table', 'truncate', 'reset', or 'wipe', instead of only abstract risk adjectives.

Tone down the universal trigger ('If there is even a remote chance - load the skill') and the ALL-CAPS emphasis; replace with a precise 'Use when...' clause listing concrete dangerous-operation categories to reduce conflict risk with every other skill.

DimensionReasoningScore

Specificity

The description names the domain (dangerous, irreversible, destructive, high-risk actions) but contains no concrete action the skill itself performs — there is no statement of what it does (e.g., assess risk, gate on approval, propose safer alternatives). It is not pure abstract language like 'Helps with documents', but it fails anchor 3's requirement of naming 1-2 concrete actions.

2 / 5

Completeness

The 'when' is extremely explicit ('MUST activate when action or its consequence is potentially dangerous... If there is even a remote chance - load the skill'), but the 'what' is entirely absent — the description never states what the skill does once activated. This matches anchor 2 ('only when is present without what'); it cannot reach 3 without a clear 'what'.

2 / 5

Trigger Term Quality

Includes relevant keywords like 'dangerous', 'destructive', 'irreversible', 'high risk', and 'production', but misses the natural phrases a user would actually say when needing this skill ('delete data', 'force push', 'drop table', 'wipe', 'reset'). Matches anchor 3: some relevant keywords but missing common variations or synonyms.

3 / 5

Distinctiveness Conflict Risk

Triggers like 'MUST activate when consequence MAYBE dangerous even if action itself seems safe' and 'even a remote chance' make the activation scope maximally broad, creating high overlap risk with virtually every operational skill (git, databases, deployment, file management). The safety-gating niche itself is distinct, so it is above anchor 1 but clearly at anchor 2.

2 / 5

Total

9

/

20

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

15

/

16

Passed

Repository

griddynamics/rosetta

Path

instructions/r2/core/skills/dangerous-actions/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.