CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

html-ppt-zhangzara-retro-windows

An IT security-awareness training on spotting phishing — the tells, the drill, and what to do in the first 60 seconds. Built as a decision-grade professional training deck for all employees.

61

Quality

77%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Low

Low-risk findings worth noting

Fix and improve this skill with Tessl

tessl review fix ./design-templates/html-ppt-zhangzara-retro-windows/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

82%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A tight, well-organized template skill: lean prose, a concrete six-step workflow with preservation rules, and an exact output contract. The main gaps are minor — no explicit verification/critic step in the body, and bundle-file references (example.html, template.json, LICENSE) could not be verified because no bundle files were provided.

DimensionReasoningScore

Conciseness

The body is lean with no filler or explanations of concepts Claude already knows — the blockquote distills the visual system ("gray title bars, MS Sans Serif, pixel typography"), "At a glance" is a four-line fact block, and the workflow states exactly what to do and why. It matches anchor 5 (lean, assumes competence, every token earns its place) rather than 4, which would require identifiable padding — the only candidates ("Best for"/"Avoid for") are template-selection judgment that adds real value.

5 / 5

Actionability

Concrete, specific directives throughout: "Clone `example.html` into the user's workspace", "duplicate an existing slide of the most appropriate layout... Update page-number labels", and a copy-paste-ready `<artifact>` output contract. It falls at anchor 4 (mostly executable guidance with minor gaps) rather than 5 because a few details stay underspecified — e.g., what "match existing dimensions" means for image placeholders is left to the demo file, and no command or snippet is shown for the clone step.

4 / 5

Workflow Clarity

The six numbered steps form a coherent, well-ordered sequence (clone → replace content → preserve system → scale length → design missing layouts → keep runtime) with concrete per-step detail. It is anchor 4 rather than 5 because there is no explicit validation or critic step in the body (e.g., "render the deck and check navigation before delivering") — the critic pass exists only in the frontmatter's example prompt. The destructive/batch cap does not apply since this is content creation.

4 / 5

Progressive Disclosure

Sections are clearly headed and the body stays an overview, with detail properly delegated to bundle files — `example.html` as the working source, `template.json` for the upstream metadata snapshot, and `LICENSE` linked one level deep. No `references/`, `scripts/`, or `assets/` bundle files were present to verify the referenced paths against, so it scores anchor 4 (good structure, appropriate placement, minor gaps — the inline prose references to `example.html`/`assets/deck-stage.js` are not verifiable in the bundle) rather than anchor 5's fully confirmed one-level-deep reference set.

4 / 5

Total

17

/

20

Passed

Description

65%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description is concrete and clearly niche — a phishing-awareness training deck with specific content beats — but it describes the deck's subject rather than the skill's actions, and it entirely lacks a "Use when..." trigger clause, capping completeness. Trigger keywords are good though incomplete (missing variations like "phishing email" or "cybersecurity awareness").

Suggestions

Add an explicit trigger clause, e.g. "Use when the user asks for a security-awareness, anti-phishing, or employee training deck/presentation."

Lead with the skill's action in third person ("Creates a phishing-awareness training deck covering the tells, the drill, and the first-60-seconds response") instead of opening with a noun phrase describing the deck.

Include common trigger variations users would naturally say — "phishing email", "cybersecurity awareness", "social engineering" — alongside the existing terms.

DimensionReasoningScore

Specificity

The description names the domain concretely — "An IT security-awareness training on spotting phishing — the tells, the drill, and what to do in the first 60 seconds" — with specific content elements (tells, drill, first-60-seconds response), but it frames the deliverable's subject rather than the skill's actions; only "Built as a decision-grade professional training deck" gestures at what the skill does. It sits at anchor 3 (domain plus 1–2 concrete actions, not comprehensive) rather than 2 because the what is specific and multi-faceted, and not 4 because no list of distinct skill actions is given.

3 / 5

Completeness

The "what" is clear and concrete (a phishing-awareness training deck with tells, a drill, and a first-60-seconds response section), but there is no "Use when..." clause or equivalent explicit trigger guidance anywhere in the description — the judging guideline explicitly caps completeness at 3 for this. It is above anchor 2 because the what is specific rather than vague.

3 / 5

Trigger Term Quality

Natural phrases a user would say are present: "security-awareness training", "spotting phishing", "training deck", "professional training". Common variations are missing — "phishing email", "cybersecurity awareness", "social engineering", or any audience-side phrasing beyond "all employees" — which matches anchor 4 (good coverage, a few natural terms missing) and not anchor 5's comprehensive synonym coverage.

4 / 5

Distinctiveness Conflict Risk

The niche is distinct: phishing-spotting security-awareness training for employees. Terms like "spotting phishing", "the first 60 seconds", and "security-awareness training" are unlikely to collide with unrelated skills. It matches anchor 5 (clear niche, distinct triggers, minimal conflict risk) rather than 4, which would require recognizable overlap with closely related skills.

5 / 5

Total

15

/

20

Passed

Validation

81%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 13 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

relative_links

Relative link issues: 1 missing

Warning

referenced_paths_exist

Referenced path issues: 1 missing

Warning

Total

13

/

16

Passed

Repository

nexu-io/open-design

Path

design-templates/html-ppt-zhangzara-retro-windows/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.