CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

aegisops-ai

Autonomous DevSecOps & FinOps Guardrails. Guide to reviewing Linux kernel patches, Terraform cost changes and Kubernetes policy with a separately reviewed upstream tool and configured model.

Quality

65%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Low

Low-risk findings worth noting

Fix and improve this skill with Tessl

tessl review fix ./plugins/agentic-awesome-skills-claude/skills/aegisops-ai/SKILL.md

The canonical home for this skill is aegisops-ai in boisenoise/skills-collections

SKILL.md
Quality
Evals
Security

Quality

Content

53%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body is a well-organized, safety-conscious overview with honest limitations ('When Not to Use', 'Limitations') and executable setup commands, but it never shows how to actually invoke the three core modules, sequences no end-to-end review workflow, and carries a redundant buzzword-heavy 'Generative AI Integration' section plus per-module 'Problem' padding. It works as an introduction but would leave an agent guessing at the concrete usage steps.

Suggestions

Add one executable example per core module (CLI invocation or Python snippet) showing how to run patch_analyzer.py on a diff, cost_auditor.py on a terraform plan, and k8s_policy_generator.py on a security intent.

Replace the 'Generative AI Integration' section and the per-module 'Problem' bullets with a single sequenced operational workflow (prepare input with 5 lines of diff context, run module, review findings, validate/stage, human sign-off) with explicit checkpoints.

Trim marketing phrasing ('Neural', 'Intelligent', 'Silent Disaster' framing) and consolidate the duplicated security/key-management guidance from Setup and Security Notes into one section.

DimensionReasoningScore

Conciseness

The body is mostly efficient structured guidance, but contains padded marketing sections: 'Generative AI Integration' restates the three Core Modules in buzzword form ('Neural Patch Analysis', 'Intelligent Cost Synthesis'), and each module's 'Problem' bullet ('Manual review... is time-consuming and prone to human error') is motivational fluff. It stays above anchor 2 because no basic concepts are over-explained and the setup/usage content is tight.

3 / 5

Actionability

Setup guidance is copy-paste executable (git clone, venv, pip install, 'python3 main.py') and key outputs are named (analysis_results.json, hardened_deployment.yaml), but the three core modules have no invocation examples — no CLI arguments, no Python usage, no example run for patch_analyzer.py, cost_auditor.py or k8s_policy_generator.py. This is a key-details gap matching anchor 3 rather than 4.

3 / 5

Workflow Clarity

The setup sequence is clear, and validation concerns do appear ('verify each reachable trigger and consequence through code review and appropriate tests', 'Test "Hardened" manifests in staging first'), but the actual operational workflow (prepare diff with 5 lines of context, run the analyzer, verify findings, human sign-off) is never laid out as a sequence — checkpoints are scattered across sections rather than stepped. Anchor 3 (sequence present but checkpoints implicit/scattered) fits; anchor 4 requires an explicit sequence with most checkpoints inline.

3 / 5

Progressive Disclosure

No bundle files exist (references/, scripts/, assets/ are absent), and the ~128-line body is well-sectioned with clear headers and no inlined bulk reference material, so there is nothing buried or nested. It does not reach anchor 5 because the setup and per-module documentation could plausibly be split into reference files, leaving minor organization gaps characteristic of anchor 4.

4 / 5

Total

13

/

20

Passed

Description

61%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description names a distinctive three-domain niche with decent natural keywords, but it opens with buzzword framing ('Autonomous DevSecOps & FinOps Guardrails'), includes vague trailing filler about a 'separately reviewed upstream tool and configured model', and completely lacks any 'when to use' trigger guidance. It communicates the domain but not the full capability set or activation conditions.

Suggestions

Add an explicit trigger clause, e.g. 'Use when reviewing Linux kernel diffs, auditing terraform plan output for cost regressions, or hardening Kubernetes securityContexts.'

Replace the vague opener and trailing filler with additional concrete actions per domain (e.g. 'detects UAF and stale-state bugs in kernel patches', 'flags instance-size escalations in Terraform plans', 'generates least-privilege securityContexts').

Include natural synonyms and variations users would say: 'K8s', 'IaC', 'terraform plan', 'cloud bill/spend', 'securityContext'.

DimensionReasoningScore

Specificity

The description names three domains ('reviewing Linux kernel patches, Terraform cost changes and Kubernetes policy') but offers only a single generic action verb ('reviewing'); 'Autonomous DevSecOps & FinOps Guardrails' and 'with a separately reviewed upstream tool and configured model' are abstract filler, not concrete actions. It matches anchor 3 (domain named, 1-2 concrete actions, not comprehensive) rather than anchor 4, which requires several distinct specific actions.

3 / 5

Completeness

The 'what' is clear (reviewing kernel patches, Terraform cost changes, Kubernetes policy), but there is no 'Use when...' clause or equivalent explicit trigger guidance, which per the judging guidelines caps completeness at 3. It cannot score 4 because the 'when' is entirely absent rather than merely imprecise.

3 / 5

Trigger Term Quality

On-target natural keywords are present: 'Linux kernel patches', 'Terraform', 'Kubernetes policy', 'cost'. Common variations and synonyms are missing ('K8s', 'IaC', 'terraform plan', 'securityContext', 'cloud bill/spend'), fitting anchor 4 (good keyword coverage, a few natural terms missing) better than anchor 3, since more than one relevant keyword is covered across all three domains.

4 / 5

Distinctiveness Conflict Risk

The kernel-patch/Terraform-cost/K8s-policy governance niche is distinctive and unlikely to fire for unrelated skills. Minor overlap risk remains with generic security-review or Terraform/IaC skills, so anchor 4 (mostly distinct, minor overlap risk) fits better than anchor 5.

4 / 5

Total

14

/

20

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

15

/

16

Passed

Repository

sickn33/agentic-awesome-skills

Path

plugins/agentic-awesome-skills-claude/skills/aegisops-ai/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.