Expert in Cilium eBPF-based networking and security for Kubernetes. Use for CNI setup, network policies (L3/L4/L7), service mesh, Hubble observability, zero-trust security, and cluster-wide network troubleshooting. Specializes in high-performance, secure cluster networking.
73
75%
Does it follow best practices?
Impact
Pending
No eval scenarios have been run
Passed
No known issues
Optimize this skill with Tessl
npx tessl skill review --optimize ./skills/cilium-expert/SKILL.mdQuality
Discovery
100%Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.
This is a strong skill description that clearly identifies its domain (Cilium/eBPF networking for Kubernetes), lists specific capabilities, and provides explicit trigger scenarios with the 'Use for' clause. The technical terminology is appropriate for the target audience and creates clear distinctiveness from other networking or Kubernetes skills.
| Dimension | Reasoning | Score |
|---|---|---|
Specificity | Lists multiple specific concrete actions: CNI setup, network policies (L3/L4/L7), service mesh, Hubble observability, zero-trust security, and cluster-wide network troubleshooting. These are concrete, actionable capabilities. | 3 / 3 |
Completeness | Clearly answers both what ('Expert in Cilium eBPF-based networking...') and when ('Use for CNI setup, network policies...'). The 'Use for' clause explicitly lists trigger scenarios. | 3 / 3 |
Trigger Term Quality | Includes strong natural keywords users would say: 'Cilium', 'eBPF', 'Kubernetes', 'CNI', 'network policies', 'L3/L4/L7', 'service mesh', 'Hubble', 'zero-trust', 'network troubleshooting'. Good coverage of domain-specific terms. | 3 / 3 |
Distinctiveness Conflict Risk | Highly distinctive with clear niche: Cilium-specific, eBPF-based, Kubernetes networking. The combination of Cilium + Hubble + eBPF creates a unique fingerprint unlikely to conflict with generic networking or Kubernetes skills. | 3 / 3 |
Total | 12 / 12 Passed |
Implementation
50%Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.
This skill provides excellent actionable content with production-ready YAML manifests, Helm commands, and test scripts for Cilium networking. However, it is severely bloated with unnecessary explanations of concepts Claude already understands, redundant capability descriptions, and content that should be in reference files. The workflow clarity is adequate but inconsistent, with some patterns missing explicit validation steps for risky operations.
Suggestions
Reduce the Overview and Core Responsibilities sections by 70%+ - remove explanations of what Cilium features are and keep only actionable guidance on when/how to use them
Move detailed pattern implementations (Patterns 1-7) to a separate reference file, keeping only a quick-reference table with links in the main skill
Add explicit validation checkpoints to each implementation pattern (e.g., 'Verify with: hubble observe --verdict DROPPED' after each policy application)
Remove bullet-point lists that describe capabilities Claude already knows (e.g., 'mTLS: Automatic mutual TLS between services, certificate management...') and replace with only the specific commands/configs needed
| Dimension | Reasoning | Score |
|---|---|---|
Conciseness | Extremely verbose at ~1000+ lines with significant redundancy. Explains concepts Claude already knows (what eBPF is, what mTLS means, basic Kubernetes concepts). Contains excessive bullet-point lists describing capabilities rather than actionable instructions. The overview section alone could be reduced by 80%. | 1 / 3 |
Actionability | Provides fully executable YAML manifests, Helm commands, and bash scripts throughout. Code examples are copy-paste ready with complete CiliumNetworkPolicy definitions, Hubble CLI commands, and test scripts. The implementation patterns include working configurations. | 3 / 3 |
Workflow Clarity | Section 6 provides a TDD workflow with clear steps, but validation checkpoints are inconsistent across the document. Many patterns lack explicit 'verify before proceeding' steps. The testing section has good scripts but they're not integrated into the main workflow patterns. Missing feedback loops in several risky operations like CNI upgrades. | 2 / 3 |
Progressive Disclosure | References external files (references/network-policies.md, references/observability.md) appropriately, but the main document is monolithic with too much inline content. The 14 major sections could be split into separate reference files. Good section headers but content that should be in reference files is embedded inline. | 2 / 3 |
Total | 8 / 12 Passed |
Validation
68%Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.
Validation — 11 / 16 Passed
Validation for skill structure
| Criteria | Description | Result |
|---|---|---|
skill_md_line_count | SKILL.md is long (1444 lines); consider splitting into references/ and linking | Warning |
description_trigger_hint | Description may be missing an explicit 'when to use' trigger hint (e.g., 'Use when...') | Warning |
metadata_version | 'metadata' field is not a dictionary | Warning |
license_field | 'license' field is missing | Warning |
frontmatter_unknown_keys | Unknown frontmatter key(s) found; consider removing or moving to metadata | Warning |
Total | 11 / 16 Passed | |
1086ef2
Table of Contents
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.