CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

ifixai

Audit the user's own AI agent with iFixAi. You find the agent in their repo, confirm it, ask at most two questions, write a short profile of it with every value cited from the repo, turn the profile into the audit's simulation environment with `ifixai author`, check it with `ifixai validate`, show the dry-run cost, run after a yes and explain the findings. Use when the user asks to audit, inspect, red-team or stress-test an agent, or to run iFixAi.

Quality

93%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

SKILL.md
Quality
Evals
Security

Quality

Content

96%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

Excellent instructional content: dense, fully executable, and a genuinely validated workflow with feedback loops at every risky point. The only structural improvement available is moving the long profile-field specification out of the main file.

Suggestions

Move the step-4 field table and its category/risk_level/classification rules into a references/profile-schema.md and keep a short summary plus a pointer in SKILL.md, trimming the main file by ~60 lines.

Consider a brief references/findings.md for the step-9 verdict glossary (FAIL/INCONCLUSIVE/ERROR/not applicable, run-invalid banner, exit code 2) so the main flow stays a pure overview.

DimensionReasoningScore

Conciseness

The body is lean throughout — every sentence carries iFixAi-specific information ('Pass `--endpoint` the base URL through `/v1`', 'A `*** RUN INVALID ***` banner means the run measured almost nothing') and nothing explains concepts Claude already knows. Not a 4 because there is no identifiable padding or over-explanation to trim; even the examples (the confirmation message, the profile shape) each earn their place.

5 / 5

Actionability

Guidance is fully executable and copy-paste ready: concrete grep commands for step 1, `ifixai author profile.json -o fixture.yaml`, `ifixai validate fixture.yaml`, a complete dry-run command with all flags (`--provider http --endpoint <agent-url> --api-key "$AGENT_API_KEY" --fixture fixture.yaml --mode standard --output ifixai-results --dry-run`), `--resume <run_id>` recovery, and a worked profile JSON example. Not a 4 because no command lacks the details needed to run it.

5 / 5

Workflow Clarity

The 9-step flow is clearly sequenced with explicit validation checkpoints and feedback loops: `ifixai validate` refuses and names what to add, the fix is re-authored with `--force` and re-validated, the dry run precedes an explicit wait-for-yes before the real run, and failures surface at the first connection test before any probe. This matches the anchor 5 validate-fix-retry pattern; a 4 would require a missing checkpoint, and none is missing despite the run being a real adversarial operation.

5 / 5

Progressive Disclosure

The single file is well-sectioned and mirrors the flow (engine, steps 1-9, honest constraints) with no buried or nested references, since there are none — but at ~208 lines it inlines content that would sit better one level deep, chiefly the ~60-line profile field spec in step 4 that could be a references/profile-schema.md. It is not a 5 because nothing is split out at all; not a 3 because the structure is clean, well-signaled and easy to navigate as is.

4 / 5

Total

19

/

20

Passed

Description

87%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong description: it walks the entire workflow concretely and closes with an explicit, well-phrased trigger clause. The only deductions are the second-person phrasing on the capability list and a few missing natural synonyms in the triggers.

Suggestions

Rewrite the capability sentence in third person to match the opening (e.g. 'Finds the agent in the user's repo, confirms it, asks at most two questions...' instead of 'You find the agent in their repo...'), which would restore the specificity score to 5.

Add the natural synonyms users would plausibly say to the trigger clause, such as 'pentest my agent' or 'test my agent's safety'.

DimensionReasoningScore

Specificity

The description lists multiple concrete actions covering the whole workflow ('find the agent in their repo', 'ask at most two questions', 'ifixai author', 'ifixai validate', 'show the dry-run cost', 'run after a yes'), which matches the comprehensive anchor 5 — but it uses second person ('You find the agent in their repo'), and the rubric's third-person rule reduces the specificity score by 1. It is not a 3 because far more than 1-2 concrete actions are named.

4 / 5

Completeness

It explicitly answers both what (find, confirm, question, profile with citations, author, validate, dry-run cost, run, explain findings) and when ('Use when the user asks to audit, inspect, red-team or stress-test an agent, or to run iFixAi') with concrete trigger phrases — the exact anchor 5 pattern. A 4 would require the 'when' to be less explicit, which it is not.

5 / 5

Trigger Term Quality

'audit, inspect, red-team or stress-test an agent, or to run iFixAi' gives good natural-phrase coverage, but common variations users would actually say — 'pentest my agent', 'test my agent's safety', 'adversarial testing' — are missing. Not a 5 because synonym coverage is incomplete; clearly above a 3, which would require missing common variations entirely.

4 / 5

Distinctiveness Conflict Risk

The iFixAi agent-audit niche with its named commands ('ifixai author', 'ifixai validate') and specific triggers (red-team/stress-test an agent) is distinct and unlikely to fire for unrelated skills. It is not a 4 because no closely related skill would realistically compete for these triggers.

5 / 5

Total

18

/

20

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository

ifixai-ai/iFixAi

Path

plugin/skills/ifixai/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.