CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

opa

Generate, test, validate, explain, and debug OPA (Open Policy Agent) Rego policies and Conftest configurations. Covers deny/warn/violation rules, unit tests, regal linting, conftest fmt, namespace design, input shape analysis, and GitHub Actions integration. Use when asked to "write a policy", "test a rego file", "validate policies", "explain this rego", or "why is my policy not firing".

Quality

88%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

SKILL.md
Quality
Evals
Security

Quality

Content

81%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A well-structured, highly actionable skill: all five modes have numbered steps, concrete CLI commands, and explicit validation blocks, and it assumes Claude's Rego competence rather than teaching basics. The main improvements are trimming the wizard prompt duplication and splitting per-mode detail into reference files.

Suggestions

Add one minimal complete example deny rule in the generate mode so the output is copy-paste ready rather than structural guidance.

Compress the wizard's fully quoted prompts into a short table of mode-to-context-question mappings; the prompt text currently duplicates the mode descriptions.

Move the longer per-mode detail (debug checklist, test naming conventions) into references/ files linked from each mode section to keep SKILL.md an overview.

DimensionReasoningScore

Conciseness

The body is dense and operational, assuming Rego knowledge ('Use `some` for iteration, `in` for membership'), but the wizard's fully quoted prompts duplicate the per-mode descriptions and could be tightened into a compact table — minor instances of over-explanation, matching anchor 4 rather than the lean anchor 5.

4 / 5

Actionability

Concrete commands appear throughout ('conftest verify --policy <dir>', 'regal lint <dir>', "grep -oE 'input\.[a-zA-Z0-9_.[\]]+'"), but the generate mode describes policy structure without a single example rule and the jq filter is a placeholder pattern rather than executable code — mostly executable with minor gaps, short of the copy-paste-ready anchor 5.

4 / 5

Workflow Clarity

Every mode is a numbered sequence with explicit validation checkpoints: generate requires both a passing and a failing resource, test requires 'zero skipped', validate chains fmt --check to auto-format to lint to verify with a per-step report, and debug ends with 'how to verify it fires' — the explicit-validation-and-feedback-loop anchor. The one in-place rewrite (auto-format) is gated behind the fmt --check, so no risky step lacks validation.

5 / 5

Progressive Disclosure

Headers and mode sections are well organized and every command is real, but the ~130-line body keeps per-mode detail (debug checklist, test naming conventions, wizard prompts) inline in a single file with no one-level-deep references, fitting 'good structure; minor organization gaps' rather than the split-content anchor 5.

4 / 5

Total

17

/

20

Passed

Description

92%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong description: it names concrete capabilities, covers subtopics comprehensively, and provides explicit quoted trigger phrases in third person. The only gap is a few missing natural trigger variants such as the .rego file extension.

DimensionReasoningScore

Specificity

Lists five concrete actions ('Generate, test, validate, explain, and debug') plus specific coverage topics ('deny/warn/violation rules, unit tests, regal linting, conftest fmt, namespace design, input shape analysis'), matching the comprehensive-coverage anchor.

5 / 5

Completeness

Explicitly answers both what (five concrete actions plus covered subtopics) and when ('Use when asked to ... why is my policy not firing') with concrete trigger phrases, matching the top anchor.

5 / 5

Trigger Term Quality

Quoted triggers like 'write a policy', 'test a rego file', and 'why is my policy not firing' are natural user phrasings, but common variants such as the '.rego' file extension and 'lint my policy'/'conftest test' phrasings are missing, fitting 'good keyword coverage; a few natural terms missing'.

4 / 5

Distinctiveness Conflict Risk

The OPA/Rego/Conftest niche is unmistakable and the quoted triggers are domain-specific, giving minimal overlap risk with other skills.

5 / 5

Total

19

/

20

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

15

/

16

Passed

Repository

nitinjain999/platform-skills

Path

skills/opa/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.