Content
96%Weight 40%Scale 1-5Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.
A tight, highly actionable skill body with a well-sequenced workflow, explicit validation, and proper offloading of exhaustive flag/exit-code tables to a one-level reference file. Minor room to surface the bundle reference more prominently in an overview/contents list.
| Dimension | Reasoning | Score |
|---|---|---|
Conciseness | Lean, dense reference that assumes Claude's competence — no 'what is SAST' padding, every line is command/flag/rule guidance, and exhaustive flag tables are offloaded to the bundle file. | 5 / 5 |
Actionability | Copy-paste ready commands throughout (install, `semgrep scan --config p/owasp-top-ten`, a complete YAML rule, a working GitHub Actions job, `semgrep validate`), covering the common end-to-end cases. | 5 / 5 |
Workflow Clarity | Six clearly sequenced steps with explicit validation (`semgrep validate --config .semgrep.yml`), a mandatory triage workflow with justification template, and an anti-patterns table providing error-recovery feedback for the batch/destructive CI-gate context. | 5 / 5 |
Progressive Disclosure | Clear one-level reference to references/cli-reference.md for the exhaustive tables (verified real file), with a concise spine; the single reference is well-signaled, though the overview does not enumerate every bundle path upfront. | 4 / 5 |
Total | 19 / 20 Passed |