CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

analyzing-network-packets-with-scapy

Use Scapy to craft, send, sniff, and dissect TCP/UDP/ICMP/DNS packets, analyze pcap files, implement SYN scans, and detect anomalous traffic such as fragmented or malformed packets. Use when performing authorized network reconnaissance, protocol-level forensic analysis, or building traffic anomaly detection during security testing.

Quality

79%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Low

Low-risk findings worth noting

Fix and improve this skill with Tessl

tessl review fix ./skills/analyzing-network-packets-with-scapy/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

57%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body is well-structured and concise but stops at abstract step descriptions without executable code or validation checkpoints, and it fails to point to the provided api-reference.md and agent.py bundle files. Linking those references and adding concrete examples with verification steps would materially raise the score.

Suggestions

Add a brief, copy-paste Scapy code example in the body (e.g. a rdpcap + layer-extraction snippet) or link to references/api-reference.md so guidance is executable rather than abstract.

Reference scripts/agent.py explicitly in the Steps or a 'Tooling' section so the provided bundle is discoverable.

Insert a validation/verification checkpoint (e.g. sanity-check parsed packet counts or validate anomaly thresholds before exporting) to satisfy the batch-operation feedback-loop expectation.

DimensionReasoningScore

Conciseness

The body is lean with organized sections and avoids over-explaining concepts Claude already knows; the Overview mildly restates the description and could be trimmed slightly, but otherwise efficient.

4 / 5

Actionability

Steps name Scapy functions (e.g. rdpcap()) but provide no executable code blocks in the body, and the existing api-reference.md and agent.py bundle files are never referenced, leaving guidance high-level rather than copy-paste ready.

3 / 5

Workflow Clarity

Steps are numbered 1-7 with an Expected Output target, but there are no validation/verification checkpoints or feedback loops for this batch packet-analysis operation, capping the score at 3 per the batch-operations guideline.

3 / 5

Progressive Disclosure

Section structure (Overview, When to Use, Prerequisites, Steps, Expected Output) is present, but the bundle files in references/ and scripts/ are not signaled or linked from the body, so navigation to the deeper material is missing.

3 / 5

Total

13

/

20

Passed

Description

92%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong, specific description with explicit capability enumeration and a clear 'Use when' trigger clause covering authorized reconnaissance, forensics, and anomaly detection. Only minor gap is missing common file-extension synonyms (.pcap).

DimensionReasoningScore

Specificity

Lists multiple concrete actions ('craft, send, sniff, and dissect TCP/UDP/ICMP/DNS packets, analyze pcap files, implement SYN scans, and detect anomalous traffic such as fragmented or malformed packets'), matching the comprehensive-coverage anchor.

5 / 5

Completeness

Explicitly answers both what (the packet operations) and when ('Use when performing authorized network reconnaissance, protocol-level forensic analysis, or building traffic anomaly detection during security testing').

5 / 5

Trigger Term Quality

Includes natural terms like 'pcap files', 'SYN scans', 'network reconnaissance', 'forensic analysis', and 'anomaly detection', but omits common synonyms/file extensions such as '.pcap' or 'packet capture'.

4 / 5

Distinctiveness Conflict Risk

Scoped to Scapy-based packet manipulation with distinct triggers; unlikely to fire for unrelated skills.

5 / 5

Total

19

/

20

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

15

/

16

Passed

Repository

mukul975/Anthropic-Cybersecurity-Skills

Path

skills/analyzing-network-packets-with-scapy/SKILL.md

Revision

54a7988

Reviewed

Table of Contents

DiscoveryImplementationValidation

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.

Claim skill