CtrlK
BlogDocsLog inGet started
Tessl Logo

password-hash-generator

Password Hash Generator - Auto-activating skill for Security Fundamentals. Triggers on: password hash generator, password hash generator Part of the Security Fundamentals skill category.

38

1.00x

Quality

7%

Does it follow best practices?

Impact

96%

1.00x

Average score across 3 eval scenarios

SecuritybySnyk

Passed

No known issues

Optimize this skill with Tessl

npx tessl skill review --optimize ./planned-skills/generated/03-security-fundamentals/password-hash-generator/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Discovery

7%

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

This description is severely underdeveloped, essentially serving as a placeholder rather than a functional skill description. It lacks concrete actions, meaningful trigger terms, and any guidance on when Claude should select this skill. The redundant trigger phrase and boilerplate category mention provide no useful information for skill selection.

Suggestions

Add specific actions the skill performs, e.g., 'Generates secure password hashes using bcrypt, Argon2, or SHA-256 algorithms. Supports configurable salt rounds and outputs hash strings for storage.'

Include a 'Use when...' clause with natural trigger terms: 'Use when the user asks to hash a password, generate secure password storage, create bcrypt/Argon2 hashes, or needs help with password security.'

Add variations of trigger terms users might naturally say: 'hash my password', 'secure password', 'bcrypt', 'password encryption', 'store passwords safely'.

DimensionReasoningScore

Specificity

The description only names the skill ('Password Hash Generator') without describing any concrete actions. It doesn't explain what hashing algorithms are supported, what inputs it accepts, or what outputs it produces.

1 / 3

Completeness

The description fails to answer 'what does this do' beyond the title, and the 'when' guidance is just a duplicate trigger phrase. There's no explicit 'Use when...' clause or meaningful trigger guidance.

1 / 3

Trigger Term Quality

The 'Triggers on' field redundantly lists 'password hash generator' twice, providing no variation. Missing natural terms users might say like 'hash password', 'bcrypt', 'SHA', 'encrypt password', 'secure password storage'.

1 / 3

Distinctiveness Conflict Risk

The term 'password hash generator' is fairly specific to a niche function, reducing conflict risk with unrelated skills. However, it could overlap with broader security or encryption skills due to lack of clear boundaries.

2 / 3

Total

5

/

12

Passed

Implementation

7%

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

This skill is essentially a placeholder with no actionable content. It describes what a password hash generator skill should do but provides zero implementation details, code examples, or specific guidance. A proper skill would include actual hashing code (e.g., using bcrypt/argon2), security considerations, and concrete examples.

Suggestions

Add executable code examples showing password hashing with a secure algorithm (e.g., bcrypt, argon2id) including proper salt handling

Include specific guidance on algorithm selection, cost factors, and when to use each hashing approach

Remove all generic boilerplate ('provides step-by-step guidance', 'follows industry best practices') and replace with actual implementation details

Add a workflow showing: 1) Choose algorithm 2) Generate salt 3) Hash password 4) Store securely 5) Verify on login

DimensionReasoningScore

Conciseness

The content is padded with generic boilerplate that explains nothing Claude doesn't already know. Phrases like 'provides automated assistance' and 'follows industry best practices' are filler with no actionable information.

1 / 3

Actionability

No concrete code, commands, or specific guidance is provided. The skill describes what it does abstractly ('generates production-ready code') but never shows how to actually generate a password hash.

1 / 3

Workflow Clarity

No workflow or steps are defined. For a password hashing skill, there should be clear steps showing algorithm selection, salt generation, and hash creation, but none are present.

1 / 3

Progressive Disclosure

The content is organized into sections with headers, but there's no actual content to disclose. References to related skills exist but no links to detailed implementation guides or examples.

2 / 3

Total

5

/

12

Passed

Validation

81%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation9 / 11 Passed

Validation for skill structure

CriteriaDescriptionResult

allowed_tools_field

'allowed-tools' contains unusual tool name(s)

Warning

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

9

/

11

Passed

Repository
jeremylongshore/claude-code-plugins-plus-skills
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.