CtrlK
BlogDocsLog inGet started
Tessl Logo
PluginPublic

ai-ecoverse/advanced-skills

Quarantined high-risk skills (browser session capture, WebSocket interception) for Slack and Microsoft Teams. Install only after reviewing the security implications.

Quality

94%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Low

Low-risk findings worth noting

Overview
Quality
Evals
Security
Files

Quality

Content

88%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A dense, highly actionable CLI reference: executable commands with expected outputs, explicit dry-run/confirm/read-back validation on every mutating operation, and well-signaled one-level-deep references that all exist. The weaknesses are efficiency and organization — duplicated examples between Quick start and command sections, provenance/incident narrative, run-on wire-detail bullets, and a References section buried mid-document.

Suggestions

Deduplicate examples between the Quick start and the per-command sections (e.g. the post/DM examples appear in both) so each appears once, trimming the body without losing coverage.

Cut provenance and incident narrative that does not change execution — 'This was used to verify all three users.admin.* methods before filing the PR' and the dated Zapier/#aem-fedex story — keeping only the operative rule (xoxc calls are indistinguishable from the human in event history).

Move the References section to the end of the document (the Enterprise Grid admin commands section currently follows it) and push the per-command wire-level caveats in the eg-*/channel-*/approvals bullets (exit codes, retry cadence, refusal lists) into references/enterprise-grid.md, leaving one-line summaries in SKILL.md.

DimensionReasoningScore

Conciseness

The command reference is lean and assumes competence (real IDs, flags, expected outputs, no concept explanations), but there are trimmable spots: Quick-start examples reappear near-verbatim in command sections, provenance narrative ('This was used to verify all three users.admin.* methods before filing the PR'), a dated incident story in 'CRITICAL: audit attribution', and run-on single-paragraph bullets (connect-invite, connect-permissions) packing 8+ caveats each. Not 5: not every token earns its place yet; not 3: there are no padded sections or explanations of things Claude already knows.

4 / 5

Actionability

Fully executable copy-paste commands throughout — 'slack post C087NCG774J "Hello from SLICC!"', 'slack download F0BK6BADTKK --out=/tmp/shot.png', 'ts=$(slack post C087NCG774J "…" | sed -n 's/^ts: //p')' — with expected output blocks shown so results can be verified. Specific examples cover the common cases for every command.

5 / 5

Workflow Clarity

Multi-step processes are explicitly sequenced with validation checkpoints despite destructive/batch operations being present, so the ≤3 cap does not apply: dry-run-by-default with --confirm and state read-back on every mutating command, a four-check safety policy, the list → approve → re-verify loop with expired-button recovery ('If step 3 still shows the same entry, the action button has expired. Re-trigger the request from the original source'), and 'Run connect-status before and after the two commands below.'

5 / 5

Progressive Disclosure

All five referenced files (endpoints.md, app-manifest.md, enterprise-grid.md, watch-architecture.md, support-portal.md) exist, are one level deep, and are signaled both at point of use and in a References section. Not 5: the References section sits mid-document with the 'Enterprise Grid admin commands' section placed after it, and the eg-*/channel-*/approvals bullets carry substantial inline wire-level detail that overlaps references/enterprise-grid.md. Not 3: structure is good and references are clearly signaled.

4 / 5

Total

18

/

20

Passed

Description

100%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A model description: comprehensive concrete capabilities, an explicit 'Use when…' clause, a separate trigger-terms sentence with synonyms, and third-person voice throughout, all densely packed without padding. Every dimension sits at the top anchor.

DimensionReasoningScore

Specificity

Lists ten-plus concrete actions ('read Slack messages, post to Slack channels, add or remove an emoji reaction on any message, search Slack message text and channels, read Slack threads, find and look up Slack users by name, username, or email, view Slack activity and notifications, manage Slack support requests, and watch Slack channels for new messages in real time') with no coverage gaps across the skill's full command surface. Not 4: the action list is comprehensive rather than having minor gaps.

5 / 5

Completeness

Explicitly answers both what (the full capability list) and when ('Use when the user wants to check, post, react to, or search Slack messages, add a reaction, get Slack user info, view the Slack activity feed, manage Slack support tickets/help requests, watch a Slack channel for updates, or automate any Slack task'), with concrete trigger phrases — a direct match to the score-5 anchor.

5 / 5

Trigger Term Quality

'Triggers on mentions of Slack, Slack channels, DMs, threads, or messages, Slackbot, Slack notifications, Slack support or help requests, watching/monitoring a Slack channel, react or emoji reaction, or searching Slack message text' covers natural user phrasings plus synonyms ('tickets/help requests', 'watching/monitoring'). Not 4: no common natural variation is missing.

5 / 5

Distinctiveness Conflict Risk

Clear niche ('Slack Web API client', 'Slackbot', 'slack-ext') with distinct Slack-branded triggers; minimal risk of firing for the wrong skill. Not 4: the domain branding leaves no meaningful overlap with closely related skills.

5 / 5

Total

20

/

20

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

skill_md_line_count

SKILL.md is long (726 lines); consider splitting into references/ and linking

Warning

Total

15

/

16

Passed

Reviewed

On this page