CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

openshift

OpenShift SCC diagnosis and hardening, Route TLS patterns, OpenShift GitOps app delivery, and cluster upgrade validation.

Quality

76%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Low

Low-risk findings worth noting

Fix and improve this skill with Tessl

tessl review fix ./skills/openshift/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

78%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A strong operational skill: highly actionable commands and manifests, well-sequenced workflows with validation and rollback for the destructive operations (SCC grants, cluster upgrades), and dense token-efficient presentation. The main weakness is structure: the per-mode detail is inlined wholesale in SKILL.md while the referenced deep-dive files are absent from the bundle, leaving the disclosure pointers dangling.

Suggestions

Ship the referenced files: create references/openshift.md with the SecurityContextConstraints, Routes, GitOps, and Day-2 sections the body points to, and populate examples/openshift/ — as delivered, every 'Read references/openshift.md → ...' pointer dangles.

Move the per-mode detail (full YAML manifests, troubleshooting tables, upgrade command sequences) into references/openshift.md and keep SKILL.md as a mode index with triggers and one-line summaries — ~420 lines of inlined mode content belongs in the reference layer.

Add a validation step to the gitops mode (e.g., check Application sync health after a force sync) and a rollback note (e.g., disable auto-sync or revert the manifest), matching the validation/rollback pattern the scc and upgrade modes already follow.

DimensionReasoningScore

Conciseness

Nearly all content is executable material — oc commands, YAML manifests, and symptom→cause→fix tables — with no padding of concepts Claude already knows. Minor trimmable redundancy: the Interactive Wizard re-lists the five modes already shown in the Activation block, and the opening sentence duplicates the frontmatter description.

4 / 5

Actionability

Copy-paste ready throughout: 'oc adm policy scc-subject-review', a complete custom SCC manifest with apply/verify commands, 'oc patch installplan ... -p '{"spec":{"approved":true}}'', and validation commands like 'curl -I https://<route-host>' with expected outcomes. The rejection-message and symptom tables cover the common failure cases concretely.

5 / 5

Workflow Clarity

Each mode has a clear sequence with checkpoints for the risky operations — scc is Step 1 diagnose → Step 2 map rejection → Step 3 grant → verify with 'who-can' plus a rollback note, and upgrade has a pre-upgrade checklist, post-upgrade validation, and rollback path. Not 5: the gitops mode has no validation or rollback step, and the route troubleshooting fixes don't explicitly loop back to re-verify.

4 / 5

Progressive Disclosure

References are well signaled and one level deep ('Read references/openshift.md → SecurityContextConstraints section before responding'), but the bundle contains no references/, scripts/, or assets/ files, so references/openshift.md and examples/openshift/ dangle unverified. Meanwhile ~420 lines of full mode detail (YAML, command blocks, tables) are inlined in SKILL.md — content that clearly belongs in those separate files.

3 / 5

Total

16

/

20

Passed

Description

66%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A specific, well-scoped description naming four concrete capability areas with natural OpenShift keywords. Its main gap is the missing 'Use when...' trigger clause, and secondarily the absence of common synonyms (Argo CD, OCP) that users would naturally say.

Suggestions

Add an explicit trigger clause, e.g. 'Use when the user mentions OpenShift, OCP, SCCs, Routes, Argo CD, or cluster upgrades' — its absence currently caps completeness at 3.

Include the natural synonyms users say: 'Argo CD', 'OCP', 'Red Hat OpenShift', and common symptoms like '503/504' or 'route not admitted'.

Use verb-led phrasing ('Diagnose SCC rejections and harden...', 'Troubleshoot 503/504 on Routes...') and mention the debug mode so the description covers all five capabilities.

DimensionReasoningScore

Specificity

Lists several concrete domain-specific actions — 'SCC diagnosis and hardening', 'Route TLS patterns', 'GitOps app delivery', 'cluster upgrade validation'. Not 5: the actions are noun-phrase topics rather than verb-led, and debug/troubleshooting — one of the skill's five modes — is not mentioned.

4 / 5

Completeness

The 'what' is clear and multi-part, but there is no 'Use when...' clause or equivalent explicit trigger guidance, capping completeness at 3 per the judging guideline. Not 4: the 'when' is entirely absent rather than merely implicit or underspecified.

3 / 5

Trigger Term Quality

Contains natural terms users would say: 'OpenShift', 'SCC', 'Route', 'TLS', 'GitOps', 'cluster upgrade'. Not 5: common synonyms and variations are missing — 'Argo CD', 'OCP', 'Red Hat', '503/504', 'ingress'.

4 / 5

Distinctiveness Conflict Risk

'OpenShift SCC' and 'Route' pin a clear OpenShift-specific niche with minimal conflict risk. Not 5: 'GitOps app delivery' and 'cluster upgrade' overlap with the generic gitops and kubernetes skills that this skill itself hands off to.

4 / 5

Total

15

/

20

Passed

Validation

87%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 14 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

referenced_paths_exist

Referenced path issues: 5 missing

Warning

Total

14

/

16

Passed

Repository

nitinjain999/platform-skills

Path

skills/openshift/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.