CtrlK
BlogDocsLog inGet started
Tessl Logo

terraform-policy

Write, test, or convert Terraform Policy files (.policy.hcl, .policytest.hcl, Sentinel→tfpolicy). Triggers: policy.hcl, policytest, convert sentinel, tfpolicy, write a policy.

69

Quality

84%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Passed

No findings from the security scan

SKILL.md
Quality
Evals
Security

Quality

Content

81%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A well-disciplined routing skill: lean body, real version-specific knowledge, explicit sequencing with an unknown-version fallback, and genuine one-level-deep references. The main gaps are the missing command for checking the CLI version, triple-stated routing information, and the unsurfaced shared verified-syntax.md reference.

Suggestions

Add the concrete command for the entry-point step, e.g. "check the installed CLI version with `tfpolicy version`", so the first action is executable rather than implied.

Consolidate the routing information — the "INVOKES" header line, the Routing table, and the Examples section all restate the same two-way mapping; keep the table plus one example line each and drop the rest.

Add a brief mention of references/verified-syntax.md (the shared source of truth) in the body so the router can surface it directly instead of it being reachable only two levels deep through the sub-skills.

DimensionReasoningScore

Conciseness

The body is lean and assumption-free about concepts Claude already knows, and the dense 0.2.x/0.3.x bullets are all novel version-specific behavior that earns its tokens. It is not a 5 because the routing is stated three times (the "UTILITY SKILL — INVOKES" line, the Routing table, and the Examples section all restate the same two-way mapping), which could be consolidated.

4 / 5

Actionability

Concrete, executable elements abound: a routing table with real file links, example utterances mapped to sub-skills, copy-paste `npx skills add` commands, and very specific version-dependent rules ("every mock `resource {}` block ... must declare `attrs` or `prior_attrs`"). It is not a 5 because the first instruction — "check the installed `tfpolicy` CLI version" — gives no command for how to check it, leaving the entry-point action underspecified.

4 / 5

Workflow Clarity

The sequence is explicit and correctly ordered ("Before giving authoring or testing instructions, check the installed `tfpolicy` CLI version"), each task routes unambiguously via the table, and the unknown-version branch has a defined fallback ("ask the user to check it first or provide guidance that clearly distinguishes the paths"). This is a single-purpose routing skill with no risky operations, so no validation checkpoints are required.

5 / 5

Progressive Disclosure

The body is a true overview with well-signaled, verified one-level links (references/tfpolicy-author.md, references/tfpolicy-test.md, including anchor links), and the detailed material is appropriately split into those files. It is not a 5 because the third bundle file, verified-syntax.md (the declared "source of truth"), is not surfaced from SKILL.md at all — it is only reachable two levels deep through the sub-skills, leaving the router unaware of it.

4 / 5

Total

17

/

20

Passed

Description

87%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A tight, well-constructed description that states concrete actions, exact file extensions, and an explicit trigger list covering natural user phrases. The only weakness is modest trigger-term coverage — synonyms like "migrate sentinel" and "debug policytest" that the body supports are absent from the trigger list.

DimensionReasoningScore

Specificity

"Write, test, or convert Terraform Policy files (.policy.hcl, .policytest.hcl, Sentinel→tfpolicy)" names the domain, three concrete actions, and exact file extensions, but omits capabilities the body itself advertises ("Writing or debugging a .policytest.hcl test file", "Migrating a Sentinel policy library"), so coverage has minor gaps. It is not a 3 because more than 1-2 concrete actions with full file-format detail are stated.

4 / 5

Completeness

The "what" is explicit ("Write, test, or convert Terraform Policy files") and the "when" is explicit via a dedicated concrete trigger list ("Triggers: policy.hcl, policytest, convert sentinel, tfpolicy, write a policy"), matching the anchor for both what and when with concrete trigger phrases. Voice is impersonal/imperative, so no person penalty applies.

5 / 5

Trigger Term Quality

"Triggers: policy.hcl, policytest, convert sentinel, tfpolicy, write a policy" gives good natural-phrase and extension coverage ("write a policy", "convert sentinel" read like user utterances), but misses common synonyms such as "migrate sentinel", "policy test", and the bare phrase "terraform policy". Not a 5 because several natural variations users would say are absent; well above a 3 because both extensions and natural phrases are present.

4 / 5

Distinctiveness Conflict Risk

"Terraform Policy files (.policy.hcl, .policytest.hcl, Sentinel→tfpolicy)" carves a clear niche with distinct trigger tokens (tfpolicy, policytest, sentinel) and minimal overlap risk; the body further disambiguates against .tftest.hcl and general HCL work. It fits the clear-niche/minimal-conflict anchor better than the minor-overlap anchor.

5 / 5

Total

18

/

20

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository
hashicorp/agent-skills
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.