CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

aks-network-capture

Collects bounded packet captures from AKS nodes and Azure network configuration for wire-level evidence. WHEN: "capture packets on an AKS node", "take a pcap", "run tcpdump on AKS", "prove where packets drop". Use for explicit packet-capture intent after read-only diagnostics, not general AKS connectivity or ingress troubleshooting.

Quality

89%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

SKILL.md
Quality
Evals
Security

Quality

Content

78%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A well-structured, safety-conscious skill body: lean sections, a gated and explicitly sequenced workflow delegating execution to real bundled scripts, an error table with retry loops, and clean one-level-deep references. The main improvable areas are minor: a one-line example invocation per script and tightening the small amount of duplicated/wordy prose.

Suggestions

Add a minimal example invocation (one line, with its key arguments such as node, duration, and BPF filter) for create-capture.sh or retrieve-captures.sh so the main body is self-sufficient without opening each script.

Merge the "When to Use This Skill" section into the Quick Reference table or drop it, since it restates the frontmatter description almost verbatim.

Add an explicit post-capture verification step to the workflow (e.g., confirm retrieved capture files are non-empty for the exact run ID before cleanup) to strengthen the feedback loop.

DimensionReasoningScore

Conciseness

The body is lean with no explanation of concepts Claude already knows — every section adds skill-specific policy (capability gate, MCP limitation, bounded-safety constraints). It is not 5 because "When to Use This Skill" near-duplicates the frontmatter description and the Host Capability Gate paragraph has sentences that could be tightened ("A governed Azure CLI tool alone does not establish that shell, Kubernetes commands, or artifact operations are supported.").

4 / 5

Actionability

Every workflow step links to a concrete, existing script in both Bash and PowerShell variants (e.g., "Install [Bash](scripts/setup-capture-configmap.sh) / [PowerShell](scripts/setup-capture-configmap.ps1)"), and the pinned-image ConfigMap runtime is named. It falls short of 5 because no inline example invocation or argument sketch is given, so the operator must open each script to learn its parameters.

4 / 5

Workflow Clarity

Steps 0–5 are clearly sequenced with real checkpoints: a capability gate before execution, a stop-for-separate-approval checkpoint for the debug-container fallback, and an Error Handling table with feedback loops ("Missing/stale ConfigMap | Run setup again", "Inspect Job logs; missing evidence is not success"). Not 5 because there is no explicit inline verify-success step after capture/retrieval (e.g., confirming the pcap is non-empty before cleanup); not 3 because validation checkpoints and retry loops are present, so the batch-operation cap does not apply.

4 / 5

Progressive Disclosure

The body is a lean overview and every referenced path resolves to a real file one level deep: references/capture-authorization.md exists with substantive content and no nested-reference shell, and all ten scripts under scripts/ exist, each labeled by function (install, capture, generate traffic, retrieve, Azure evidence). This matches the clear-overview, well-signaled, one-level-deep anchor.

5 / 5

Total

17

/

20

Passed

Description

95%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong description in third-person voice: it names concrete capabilities, provides natural trigger phrases with synonyms (pcap, tcpdump), and explicitly marks both when to use it and when not to. The only minor gap is that the capability list is brief rather than comprehensive.

DimensionReasoningScore

Specificity

Concrete actions are stated — "Collects bounded packet captures from AKS nodes" and "Azure network configuration for wire-level evidence" — with meaningful qualifiers like "bounded" and "wire-level". It sits at 4 rather than 5 because only two actions are named, which is not comprehensive coverage, and above 3 because the actions are specific rather than generic.

4 / 5

Completeness

The first sentence explicitly answers "what" (bounded packet captures from AKS nodes and Azure network config for wire-level evidence) and the explicit WHEN clause with quoted trigger phrases plus "Use for explicit packet-capture intent after read-only diagnostics" answers "when" concretely. Both are explicit, matching the top anchor.

5 / 5

Trigger Term Quality

The WHEN clause gives natural phrases users would actually say — "capture packets on an AKS node", "take a pcap", "run tcpdump on AKS", "prove where packets drop" — including the synonyms pcap and tcpdump. This matches the comprehensive-synonyms anchor and cannot be 4 since no common variation is obviously missing.

5 / 5

Distinctiveness Conflict Risk

The niche is distinct (AKS wire-level packet capture) and the explicit negative boundary — "not general AKS connectivity or ingress troubleshooting" — minimizes overlap with broader AKS troubleshooting skills, matching the clear-niche anchor.

5 / 5

Total

19

/

20

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository

microsoft/GitHub-Copilot-for-Azure

Path

plugins/aks-skills/skills/aks-network-capture/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.