renew-test-certs

Renews expiring TLS test certificates used by MockServer integration tests. Use when TLS tests fail with "Channel handler removed before valid response has been received", "Broken pipe", certificate expired errors, when the ":lock: certificate expiry guard" CI step fails or warns, or when a user says "renew certs", "certificates expired", "TLS tests failing".

Quality

89%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

Securityby

Passed

No findings from the security scan

Quality

Content

88%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A high-quality operational runbook that is executable, well-sequenced with validation feedback loops, and packed with project-specific gotchas rather than generic padding. Its only soft spot is conciseness/structure — some explanatory prose and the test-class catalogue could live in separate reference files.

Suggestions

Move the "Affected Test Classes" catalogue into a references file (e.g. references/affected-tests.md) and link to it, reducing body length and improving progressive_disclosure.

Tighten the "Longevity model" and "Note: cfssl includes no AKI" prose to bullet points so only the operative facts remain.

Consider extracting the openssl extension configs (ca-ext.cnf / leaf-ext.cnf) into committed assets referenced by path, so Step 2 becomes a copy rather than an inline heredoc.

Dimension	Reasoning	Score
Conciseness	Dense and operational with project-specific, non-obvious rationale (PKCS#1 vs PKCS#8 trap, AKI/SKI linkage, longevity invariants) rather than generic concepts Claude already knows; a few prose passages like the longevity-model and cfssl notes could be trimmed slightly, keeping it just under a 5.	4 / 5
Actionability	Copy-paste-ready openssl commands with exact flags, absolute paths, per-directory subject DNs, and explicit handling of the EC case; the recipes cover the common CA-regen and leaf-re-sign scenarios end to end.	5 / 5
Workflow Clarity	Clearly sequenced Steps 0–7 with an upfront guard ("run this first, and after every renewal") and an explicit Step 6 verify block (openssl verify, the authoritative guard "must PASS", then affected tests) providing validation checkpoints and a feedback loop for a destructive/batch operation.	5 / 5
Progressive Disclosure	Single self-contained SKILL.md with well-organized section headers and no nested references; the long "Affected Test Classes" list and detailed recipes are inline rather than split into reference files, a minor organization gap that keeps it below 5.	4 / 5
	Total	18 / 20 Passed

Description

90%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong, tightly-scoped description that pairs a concrete capability statement with rich, realistic trigger terms drawn from actual error messages and user phrasing. Its only minor weakness is listing a single primary action rather than enumerating the sub-operations the skill performs.

Dimension	Reasoning	Score
Specificity	Names a concrete action — "Renews expiring TLS test certificates used by MockServer integration tests" — with a precisely scoped domain; it is a single primary action rather than a list of several, which keeps it just below a 5.	4 / 5
Completeness	Explicitly answers both what (renews expiring TLS test certificates for MockServer integration tests) and when ("Use when TLS tests fail with ...", CI guard fails/warns, or user says "renew certs") with concrete trigger phrases.	5 / 5
Trigger Term Quality	Comprehensive natural triggers including exact user-facing error strings ("Channel handler removed before valid response has been received", "Broken pipe", "certificate expired"), a CI step name, and colloquial phrases ("renew certs", "TLS tests failing").	5 / 5
Distinctiveness Conflict Risk	Highly specific niche (MockServer TLS test-cert renewal) with distinctive triggers like exact error messages and a named CI guard step, giving minimal overlap with other skills.	5 / 5
	Total	19 / 20 Passed

Validation

100%

Warnings & errors only

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository: mock-server/mockserver-monorepo
Path: .opencode/skills/renew-test-certs/SKILL.md
Commit: 817ee95

Reviewed: 1 day ago

Table of Contents

Discovery Implementation Validation

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.