CtrlK
BlogDocsLog inGet started
Tessl Logo
PluginPublic

testland/synthetic-pii-generator

Use when seeding non-production environments, building demo data, or replacing real personal data in copied datasets. Generates fake but valid-looking PII: names, emails, phones, addresses, national IDs and SSNs, Luhn-valid test card numbers and birth dates, never real people's data.

Quality

81%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

Overview
Quality
Evals
Security
Files

Quality

Content

65%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body delivers concrete, actionable guidance with a clean three-step workflow, a well-placed single reference file, and a useful anti-patterns table. Its weaknesses are redundant explanation of concepts Claude already knows (RFC 2606 domains, the synthetic-PII definition), technically flawed verification commands, and the absence of an explicit fix-and-retry loop for batch generation.

Suggestions

Trim the RFC 2606 domain enumeration and the 'Synthetic PII is...' definitional opening — Claude already knows these; keep only the operative constraint (never override to a real domain in synthetic-PII mode).

Add an explicit feedback loop after the Verification commands: when a WARNING line fires, regenerate the offending fields with the safe test ranges from the lookup tables and re-run the checks until they pass — required for a batch-generation skill.

Fix the verification commands so they execute: use yq (or grep) instead of jq for the YAML fixture, and use grep -E so the SSN range pattern '9[0-9]{2}-' matches as intended.

DimensionReasoningScore

Conciseness

Mostly efficient, but spends tokens on things Claude already knows: the full RFC 2606 domain enumeration ("example.com / example.org / example.net / *.test / *.invalid"), the definitional opening "Synthetic PII is data that looks like the real thing", and repeated RFC 2606 guidance in the Anti-patterns table. Not a 4 because these trimmable explanations are more than minor; not a 2 because the domain-specific content (PII tier table, test ranges, fixture contract) genuinely adds knowledge.

3 / 5

Actionability

Concrete, copy-paste-ready examples cover the common cases: `fake.email()` with a safe/unsafe contrast, `fake.date_of_birth(minimum_age=18, maximum_age=80)`, a complete YAML fixture, and shell verification commands. Not a 5 because the verification commands have minor executable gaps — `jq` is run against a `.yaml` file, and `grep -v '^9[0-9]{2}-'` needs `grep -E` for the quantifier to work as intended.

4 / 5

Workflow Clarity

The three-step sequence (identify PII fields → safe-by-construction values → persist `_synthetic: true` markers) is clear and includes verification commands, but this is a batch operation ("Rows generated: N") with no explicit feedback loop — nothing says what to do when a verification warning fires. Per the rubric's cap for batch operations missing feedback loops, this cannot exceed 3; it is not a 2 because checkpoints (Verification commands, Safety guarantees checklist) are explicit, not absent.

3 / 5

Progressive Disclosure

The body is a well-organized overview with one clearly signaled, one-level-deep reference — "[references/pii-lookup-tables.md](references/pii-lookup-tables.md)" — which exists in the bundle and holds the bulk lookup tables, plus a consolidated References section. Content is appropriately split (workflow inline, tables external), so it matches the clear-overview anchor rather than the 4 anchor's "minor organization gaps".

5 / 5

Total

15

/

20

Passed

Description

88%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong description: explicit and concrete trigger phrases paired with a precise enumeration of the PII types generated, in third-person voice with no padding. The only weaknesses are a few missing natural synonyms (test data, masking, fixtures) and slight overlap with anonymization-style skills.

DimensionReasoningScore

Specificity

"Generates fake but valid-looking PII: names, emails, phones, addresses, national IDs and SSNs, Luhn-valid test card numbers and birth dates" enumerates multiple concrete outputs with comprehensive coverage of the PII types. It is not the 4 anchor because coverage is essentially complete rather than having minor gaps, and it is far above the vague 1–3 anchors.

5 / 5

Completeness

It opens with an explicit trigger clause — "Use when seeding non-production environments, building demo data, or replacing real personal data in copied datasets" — and follows with a clear statement of what it does ("Generates fake but valid-looking PII..."), matching the anchor that requires both what and when with concrete trigger phrases. Not a 4 because the when-clause is already explicit and specific, not merely present.

5 / 5

Trigger Term Quality

Natural phrases like "seeding non-production environments", "building demo data", and "replacing real personal data" are things users would actually say. Not a 5 because common variations such as "test data", "sample data", "fixtures", "anonymize", or "mask" are missing, but it clearly exceeds the partial coverage of the 3 anchor.

4 / 5

Distinctiveness Conflict Risk

"Never real people's data" and the focus on generating synthetic PII carve out a clear niche, but "replacing real personal data in copied datasets" overlaps with data-masking/anonymization skills, which is minor overlap risk with closely related skills. Not a 5 because of that overlap; not a 3 since the synthetic-generation framing is much more specific than generic document/file skills.

4 / 5

Total

18

/

20

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 16 / 16 Passed

Validation for skill structure

No warnings or errors.

Reviewed

On this page