Password Hash Generator - Auto-activating skill for Security Fundamentals. Triggers on: password hash generator, password hash generator Part of the Security Fundamentals skill category.
38
Quality
7%
Does it follow best practices?
Impact
96%
1.00xAverage score across 3 eval scenarios
Passed
No known issues
Optimize this skill with Tessl
npx tessl skill review --optimize ./planned-skills/generated/03-security-fundamentals/password-hash-generator/SKILL.mdQuality
Discovery
7%Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.
This description is severely underdeveloped, essentially serving as a placeholder rather than a functional skill description. It lacks concrete actions, meaningful trigger terms, and any guidance on when Claude should select this skill. The redundant trigger phrase and boilerplate category mention provide no useful information for skill selection.
Suggestions
Add specific actions the skill performs, e.g., 'Generates secure password hashes using bcrypt, Argon2, or SHA-256 algorithms. Supports configurable salt rounds and outputs hash strings for storage.'
Include a 'Use when...' clause with natural trigger terms: 'Use when the user asks to hash a password, generate secure password storage, create bcrypt/Argon2 hashes, or needs help with password security.'
Add variations of trigger terms users might naturally say: 'hash my password', 'secure password', 'bcrypt', 'password encryption', 'store passwords safely'.
| Dimension | Reasoning | Score |
|---|---|---|
Specificity | The description only names the skill ('Password Hash Generator') without describing any concrete actions. It doesn't explain what hashing algorithms are supported, what inputs it accepts, or what outputs it produces. | 1 / 3 |
Completeness | The description fails to answer 'what does this do' beyond the title, and the 'when' guidance is just a duplicate trigger phrase. There's no explicit 'Use when...' clause or meaningful trigger guidance. | 1 / 3 |
Trigger Term Quality | The 'Triggers on' field redundantly lists 'password hash generator' twice, providing no variation. Missing natural terms users might say like 'hash password', 'bcrypt', 'SHA', 'encrypt password', 'secure password storage'. | 1 / 3 |
Distinctiveness Conflict Risk | The term 'password hash generator' is fairly specific to a niche function, reducing conflict risk with unrelated skills. However, it could overlap with broader security or encryption skills due to lack of clear boundaries. | 2 / 3 |
Total | 5 / 12 Passed |
Implementation
7%Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.
This skill is essentially a placeholder with no actionable content. It describes what a password hash generator skill should do but provides zero implementation details, code examples, or specific guidance. A proper skill would include actual hashing code (e.g., using bcrypt/argon2), security considerations, and concrete examples.
Suggestions
Add executable code examples showing password hashing with a secure algorithm (e.g., bcrypt, argon2id) including proper salt handling
Include specific guidance on algorithm selection, cost factors, and when to use each hashing approach
Remove all generic boilerplate ('provides step-by-step guidance', 'follows industry best practices') and replace with actual implementation details
Add a workflow showing: 1) Choose algorithm 2) Generate salt 3) Hash password 4) Store securely 5) Verify on login
| Dimension | Reasoning | Score |
|---|---|---|
Conciseness | The content is padded with generic boilerplate that explains nothing Claude doesn't already know. Phrases like 'provides automated assistance' and 'follows industry best practices' are filler with no actionable information. | 1 / 3 |
Actionability | No concrete code, commands, or specific guidance is provided. The skill describes what it does abstractly ('generates production-ready code') but never shows how to actually generate a password hash. | 1 / 3 |
Workflow Clarity | No workflow or steps are defined. For a password hashing skill, there should be clear steps showing algorithm selection, salt generation, and hash creation, but none are present. | 1 / 3 |
Progressive Disclosure | The content is organized into sections with headers, but there's no actual content to disclose. References to related skills exist but no links to detailed implementation guides or examples. | 2 / 3 |
Total | 5 / 12 Passed |
Validation
81%Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.
Validation — 9 / 11 Passed
Validation for skill structure
| Criteria | Description | Result |
|---|---|---|
allowed_tools_field | 'allowed-tools' contains unusual tool name(s) | Warning |
frontmatter_unknown_keys | Unknown frontmatter key(s) found; consider removing or moving to metadata | Warning |
Total | 9 / 11 Passed | |
994edc4
Table of Contents
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.