CtrlK
BlogDocsLog inGet started
Tessl Logo

intended-vs-implemented

The method for finding the gap between what a system is supposed to do and what the code actually does — the class of bug generic scanners miss because they have no model of intent. Defines what counts as documented intent, what counts as implementation evidence, which mismatches matter, and how to avoid hand-wavy findings. Use when auditing AI-built code, reviewing access control against documented permissions, or checking whether a codebase matches its own documentation.

77

Quality

96%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Passed

No findings from the security scan

SKILL.md
Quality
Evals
Security

Quality

Content

100%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A concise, well-structured method document that gives concrete, actionable guidance with a clearly sequenced workflow and built-in validation checkpoints. It earns top marks across all content dimensions; the only mild risk is that a reader might want a short worked example of a real finding, but the rubric rewards the current lean form.

DimensionReasoningScore

Conciseness

The body is lean and assumes Claude's intelligence — it does not explain what a linter or cron is beyond a load-bearing one-line contrast, and every line earns its place with no padded concept explanations.

5 / 5

Actionability

As an instruction-only skill it provides concrete, specific guidance — 'Evidence is a cited file and line' and the four-part finding template (documented intent / implemented reality / attacker and victim / concrete fix) — which the rubric treats as equivalent to executable code when guidance is actionable.

5 / 5

Workflow Clarity

A clear 5-step sequence (Establish intent → Gather evidence → Compare → Classify → Avoid hand-wavy) with explicit validation gates such as 'If you cannot cite both sides of the gap, it is a question to investigate, not a finding.'

5 / 5

Progressive Disclosure

Under 50 lines with no need for external references, the body is well-organized into clear sections (Purpose, Context, Method, What counts, Notes), which the rubric permits to score 5 for short self-contained skills.

5 / 5

Total

20

/

20

Passed

Description

92%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong, specific description that clearly states both what the skill does and when to use it, with concrete trigger phrases and a distinctive niche. The only minor gap is trigger-term breadth (no synonyms/variations), which keeps trigger quality at 4 rather than 5.

DimensionReasoningScore

Specificity

The description lists several concrete actions — 'Defines what counts as documented intent, what counts as implementation evidence, which mismatches matter, and how to avoid hand-wavy findings' — giving comprehensive coverage of the method rather than minor gaps.

5 / 5

Completeness

It explicitly answers both what ('The method for finding the gap...') and when ('Use when auditing AI-built code, reviewing access control...') with concrete trigger phrases, matching the anchor-5 pattern.

5 / 5

Trigger Term Quality

'Use when auditing AI-built code, reviewing access control against documented permissions, or checking whether a codebase matches its own documentation' provides good natural keyword coverage, though it lacks common synonyms/variations for a 5.

4 / 5

Distinctiveness Conflict Risk

It carves a clear niche — the intent-vs-implementation gap that 'generic scanners miss' — with distinct triggers and minimal overlap risk with other skills.

5 / 5

Total

19

/

20

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository
phuryn/pm-skills
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.