CtrlK
BlogDocsLog inGet started
Tessl Logo

802-regulations-dora

Use when reviewing, designing, or modifying Java enterprise systems that may support financial entities, critical ICT services, third-party ICT provider integrations, or operational resilience obligations under DORA. This should trigger for requests such as Review a Java platform for DORA ICT risk controls; Design operational resilience evidence for a financial service; Add incident, continuity, backup, recovery, or third-party ICT controls; Assess resilience testing and monitoring before production release. Part of cursor-rules-java project

65

Quality

77%

Does it follow best practices?

Impact

No eval scenarios have been run

SecuritybySnyk

Passed

No known issues

Optimize this skill with Tessl

npx tessl skill review --optimize ./skills/802-regulations-dora/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

54%

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

This is a well-structured process/governance skill with excellent workflow clarity and progressive disclosure to supporting files. Its main weakness is significant verbosity—the scope, constraints, and introductory sections repeat overlapping information extensively, and the skill explains concepts (like what DORA covers) that could be much more concise. Actionability is moderate since all concrete examples and code are deferred to reference files with no inline executable guidance.

Suggestions

Consolidate the overlapping 'Scope', 'Constraints', 'When to use this skill', and introductory paragraphs into a single concise section—currently the same concepts (financial entities, third-party ICT, incident detection, etc.) are listed 3-4 times across sections.

Remove or drastically shorten the 'not legal advice' disclaimers—stating it once is sufficient; it appears in at least three places.

Add at least one inline concrete Java code example (e.g., a health-check endpoint pattern, an incident event model, or a backup verification test) rather than deferring all examples to reference files.

DimensionReasoningScore

Conciseness

The skill is extremely verbose, with extensive explanations of what DORA is, who it applies to, and what it covers. Much of this is context Claude could infer or doesn't need repeated across multiple sections. The scope, constraints, and 'when to use' sections heavily overlap. The introductory paragraphs explaining that this is 'not legal advice' are repeated in multiple forms. The content could be cut by 50%+ without losing actionable guidance.

1 / 3

Actionability

The workflow provides a clear sequence of steps (read references, ask questionnaire, classify, review, recommend, generate report), and references concrete file paths for templates and questionnaires. However, there is no executable code, no concrete Java examples inline, and the guidance remains at a process/checklist level rather than providing copy-paste-ready commands or code snippets. The actual engineering examples are deferred entirely to reference files.

2 / 3

Workflow Clarity

The six-step workflow is clearly sequenced with explicit ordering (read references first, then ask questions one-at-a-time, then classify, then review, then recommend, then generate report). It includes validation checkpoints such as 'do not proceed to implementation review until all 20 questions are answered' and 'do not start implementation review until the chapters summary and examples are understood.' The interactive questionnaire step has explicit rules about not batching or skipping.

3 / 3

Progressive Disclosure

The skill clearly references four supporting files (chapters summary, engineering examples, questionnaire, report template) with explicit relative paths. References are one level deep and well-signaled at the top and in the workflow. The main SKILL.md serves as an overview and process guide, appropriately deferring detailed content to reference and asset files.

3 / 3

Total

9

/

12

Passed

Description

100%

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

This is a strong skill description that clearly defines its niche at the intersection of Java enterprise systems and DORA regulatory compliance. It provides explicit trigger guidance with concrete example requests, uses appropriate domain-specific terminology that users would naturally employ, and is highly distinctive. The description effectively communicates both what the skill does and when it should be activated.

DimensionReasoningScore

Specificity

Lists multiple specific concrete actions: reviewing/designing/modifying Java enterprise systems, ICT risk controls, operational resilience evidence, incident/continuity/backup/recovery/third-party ICT controls, resilience testing and monitoring assessment.

3 / 3

Completeness

Clearly answers both 'what' (reviewing/designing/modifying Java enterprise systems for DORA compliance with specific control types) and 'when' (explicit 'Use when' clause plus 'This should trigger for' with concrete example requests).

3 / 3

Trigger Term Quality

Includes strong natural trigger terms users would say: 'DORA', 'ICT risk controls', 'operational resilience', 'incident', 'continuity', 'backup', 'recovery', 'third-party ICT', 'financial service', 'resilience testing', 'Java enterprise'. These cover the domain well with natural variations.

3 / 3

Distinctiveness Conflict Risk

Highly distinctive niche combining Java enterprise systems with DORA regulatory compliance for financial entities. The specificity of the regulatory framework (DORA) and domain (financial ICT risk) makes it very unlikely to conflict with other skills.

3 / 3

Total

12

/

12

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation11 / 11 Passed

Validation for skill structure

No warnings or errors.

Repository
jabrena/cursor-rules-java
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.