CtrlK
BlogDocsLog inGet started
Tessl Logo

password-field-security

Use when reviewing headers, forms, cookies, or third-party integrations related to Secure password input fields. Validate the effective browser and HTTP behavior in a production-like environment.

67

Quality

81%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Passed

No findings from the security scan

SKILL.md
Quality
Evals
Security

Quality

Content

72%

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A well-structured, lean overview that practices good progressive disclosure by deferring implementation detail and code to a single real reference file. Its weaknesses are that the body's guidance is concrete but not executable on its own and the review process is presented as modes rather than an explicit sequenced workflow with validation feedback loops.

Suggestions

Add a short, copy-paste-ready snippet (e.g. a minimal <input type='password' autocomplete='current-password'> example) directly in the Fix section so the body is actionable without opening the reference.

Reframe Code Review as an explicit numbered sequence with a validation feedback loop, e.g. 1) inspect headers/forms/cookies, 2) flag violations, 3) verify each against a production-like response, 4) re-check after fixes.

Tighten the 'Explain' section or merge it into Check/Fix to remove mild redundancy and the one concept-explanation intro sentence.

DimensionReasoningScore

Conciseness

The body is lean and well under 50 lines: terse Quick Reference bullets plus short Check/Fix/Explain/Code Review stanzas, deferring all code and detail to references/rule.md; it is not a 2 because the only mild concept orientation (one intro sentence) does not pad the skill with material Claude already knows.

3 / 3

Actionability

It gives some concrete guidance (specific values like autocomplete='new-password'/'current-password' in Fix) but the body itself contains no executable code or copy-paste examples — those are deferred to the reference — and Code Review phrases like 'verify them against the effective production-like response' are abstract, so it sits below the fully-executable top anchor.

2 / 3

Workflow Clarity

Content is organized into task modes (Check/Fix/Explain/Code Review) and Code Review mentions a 'verify ... against the effective production-like response' checkpoint, but there is no explicit numbered sequence or feedback loop (flag -> verify -> re-check), so it does not reach the clear-sequence-with-validation top anchor.

2 / 3

Progressive Disclosure

SKILL.md is a concise overview that clearly signals a single one-level-deep reference ('see references/rule.md'), which exists and contains no further nested file pointers; the split is appropriate and easy to navigate, matching the top anchor.

3 / 3

Total

10

/

12

Passed

Description

90%

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong, concise description with an explicit 'Use when...' trigger, natural keyword coverage, and a clear, bounded niche around secure password input fields. The only mild weakness is that the action verbs ('reviewing', 'Validate') are somewhat abstract rather than enumerating distinct concrete operations.

DimensionReasoningScore

Specificity

It names the domain ('Secure password input fields') and concrete targets ('headers, forms, cookies, or third-party integrations', 'browser and HTTP behavior') with two action verbs ('reviewing', 'Validate'), but the verbs are abstract processes rather than the multiple distinct concrete operations (e.g. extract/fill/merge) that define a 3.

2 / 3

Completeness

It answers both 'what' (review/validate password-field security behavior) and 'when' with an explicit 'Use when reviewing headers, forms, cookies, or third-party integrations related to Secure password input fields' trigger, satisfying the top anchor.

3 / 3

Trigger Term Quality

Natural terms a user would say are well covered — 'password input fields', 'forms', 'headers', 'cookies', 'third-party integrations' — matching the breadth expected at the top anchor; 'browser and HTTP behavior' is slightly technical but the core triggers are natural.

3 / 3

Distinctiveness Conflict Risk

The 'Secure password input fields' niche is specific and the broad surface ('headers, forms, cookies, integrations') is bounded by the 'related to Secure password input fields' qualifier, making it unlikely to fire for unrelated skills; it is not a 2 because the qualifier disambiguates rather than leaving loose overlap.

3 / 3

Total

11

/

12

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

metadata_version

'metadata.version' is missing

Warning

Total

15

/

16

Passed

Repository
thedaviddias/Front-End-Checklist
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.