CtrlK
BlogDocsLog inGet started
Tessl Logo

input-validation-checker

Input Validation Checker - Auto-activating skill for Security Fundamentals. Triggers on: input validation checker, input validation checker Part of the Security Fundamentals skill category.

38

1.09x

Quality

7%

Does it follow best practices?

Impact

96%

1.09x

Average score across 3 eval scenarios

SecuritybySnyk

Passed

No known issues

Optimize this skill with Tessl

npx tessl skill review --optimize ./planned-skills/generated/03-security-fundamentals/input-validation-checker/SKILL.md
SKILL.md
Quality
Evals
Security

Evaluation results

98%

7%

User Registration API Validation

npm-based input validation with OWASP patterns

Criteria
Without context
With context

Uses npm validation library

100%

100%

package.json present

100%

100%

Email format validation

100%

100%

Password strength check

100%

100%

Username whitelist / type constraint

100%

100%

Input length limits

44%

100%

Structured error response

100%

100%

Validation module separated

100%

100%

OWASP alignment mentioned

100%

100%

Step-by-step explanation

100%

100%

No raw password stored

50%

75%

Without context: $0.4965 · 2m 17s · 27 turns · 28 in / 6,976 out tokens

With context: $0.5186 · 2m 14s · 27 turns · 26 in / 7,298 out tokens

100%

6%

Hardening the Login Flow

Authentication input validation and secure coding

Criteria
Without context
With context

Reusable validator module

100%

100%

Username/email format check

100%

100%

Password length constraint

70%

100%

Input size / payload limit addressed

100%

100%

Email validation on reset

100%

100%

Validation before DB lookup

100%

100%

Production-ready error handling

100%

100%

Step-by-step guide

100%

100%

Security reasoning provided

100%

100%

Industry standard referenced

70%

100%

Without context: $0.3966 · 1m 52s · 20 turns · 20 in / 6,321 out tokens

With context: $0.6044 · 2m 37s · 27 turns · 284 in / 9,468 out tokens

90%

10%

Security Audit: Contact Form Backend

Vulnerability detection in input handling code

Criteria
Without context
With context

SQL injection identified

100%

100%

SQL injection fixed

100%

100%

XSS vector identified

100%

100%

XSS vector fixed

100%

100%

Input format validation added

100%

100%

Input length limits applied

100%

100%

Uses npm package for sanitisation or validation

0%

100%

Structured audit report

100%

100%

Industry standard or risk classification referenced

0%

0%

Production-ready fixed code

100%

100%

Without context: $0.4394 · 2m 8s · 22 turns · 23 in / 7,253 out tokens

With context: $0.4821 · 2m 9s · 25 turns · 23 in / 7,119 out tokens

Repository
jeremylongshore/claude-code-plugins-plus-skills
Evaluated
Agent
Claude Code
Model
Claude Sonnet 4.6

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.