CtrlK
BlogDocsLog inGet started
Tessl Logo

testland/checkov-policy

Configures Checkov for IaC security scanning across Terraform, CloudFormation, Kubernetes, Helm, ARM, Serverless, AWS CDK - `pip install checkov`, custom Python checks, SARIF / JUnit output, and `--baseline` gating so CI fails only on new findings in legacy code. Use for the broadest built-in rule set with Python custom checks; for Terraform-only scanning use tfsec-policy, for wider platform breadth (OpenAPI / Pulumi / Crossplane) use kics-policy, and for a consolidated new-project scanner use trivy-config.

80

Quality

100%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Passed

No findings from the security scan

Overview
Quality
Evals
Security
Files

Quality

Content

100%

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body is lean and command-first with executable examples at every step, a clear sequenced workflow plus a worked adoption example, and a single well-signaled one-level reference for custom-checks and CI detail. It respects the context window while remaining fully actionable.

DimensionReasoningScore

Conciseness

Lean, command-driven body with minimal prose and no explanation of concepts Claude already knows (e.g. what IaC or Checkov is); every section earns its place. It does not reach the level below, which requires unnecessary explanation or padding.

3 / 3

Actionability

Copy-paste-ready commands and code throughout — install/version pin, 'checkov -d .', output formats, skip annotations, baseline, and a concrete GitHub Actions YAML — matching the 'fully executable code/commands' anchor.

3 / 3

Workflow Clarity

A numbered 'How to use' index sequences 9 steps, and the worked example walks adoption → baseline capture → CI run → PR-gated new-finding fail with the baseline/soft-fail pattern serving as the validation checkpoint for the CI gate. Not level 2 because checkpoints are explicit.

3 / 3

Progressive Disclosure

The body keeps the overview inline and offloads only the depth-heavy custom-checks and CI topics to a single one-level-deep reference, references/custom-checks-and-ci.md, which exists as a real bundle file; navigation is clearly signaled.

3 / 3

Total

12

/

12

Passed

Description

100%

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description is concise yet specific, naming concrete frameworks, outputs, and gating behavior while providing an explicit 'Use for...' trigger and clear sibling-skill routing. It answers what, when, and how it differs from related skills without padding.

DimensionReasoningScore

Specificity

Lists multiple concrete actions and frameworks — 'IaC security scanning across Terraform, CloudFormation, Kubernetes, Helm, ARM, Serverless, AWS CDK', 'custom Python checks, SARIF / JUnit output', '--baseline gating' — matching the 'lists multiple specific concrete actions' anchor.

3 / 3

Completeness

Explicitly answers both what (configure Checkov scanning with listed frameworks and outputs) and when via the 'Use for the broadest built-in rule set... Use for...' trigger clause, matching the 'clearly answers both what AND when' anchor.

3 / 3

Trigger Term Quality

Covers natural terms users would say — 'IaC security scanning', per-framework names, 'SARIF / JUnit output', 'baseline gating', 'CI fails only on new findings' — strong coverage rather than jargon-only.

3 / 3

Distinctiveness Conflict Risk

Gives explicit routing against tfsec-policy, kics-policy, and trivy-config with concrete differentiators, establishing a clear niche unlikely to trigger the wrong skill.

3 / 3

Total

12

/

12

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation16 / 16 Passed

Validation for skill structure

No warnings or errors.

Reviewed

Table of Contents