CtrlK
BlogDocsLog inGet started
Tessl Logo

pleaseai/portone

포트원(PortOne) 결제 연동 코드 생성 및 검토 플러그인. V1/V2 API를 지원하며, MCP 서버를 통해 최신 문서와 예시 코드를 활용합니다.

64

Quality

81%

Does it follow best practices?

Impact

No eval scenarios have been run

SecuritybySnyk

Advisory

Suggest reviewing before use

Overview
Quality
Evals
Security
Files

Quality

Discovery

89%

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description excels at trigger term coverage with bilingual keywords and has a clear 'Use when' clause, making it strong for skill selection. Its main weakness is the lack of specific concrete actions—'comprehensive guidance' is vague and doesn't enumerate what the skill actually does (e.g., process payments, handle webhooks, manage billing keys). The specificity of capabilities could be significantly improved.

Suggestions

Replace 'Provides comprehensive guidance for V1 and V2 API integration' with specific actions like 'Guides implementation of one-time payments, recurring subscriptions, billing key issuance, webhook handling, and refund processing for PortOne V1 and V2 APIs'.

DimensionReasoningScore

Specificity

The description mentions 'V1 and V2 API integration' and 'implementing payment functionality with PortOne' but doesn't list specific concrete actions like 'process payments, issue refunds, manage subscriptions, handle webhooks'. The phrase 'comprehensive guidance' is vague rather than action-specific.

2 / 3

Completeness

The description explicitly answers both 'when' (starts with 'This skill should be used when...') with detailed trigger scenarios and 'what' ('Provides comprehensive guidance for V1 and V2 API integration'). The 'when' clause is strong, though the 'what' could be more detailed.

3 / 3

Trigger Term Quality

Excellent coverage of natural trigger terms in both Korean and English: '포트원 연동', 'PortOne integration', '결제 연동', 'PG 연동', 'billing key', '빌링키', '정기결제', '웹훅', 'payment API'. These are terms users would naturally use when seeking help with PortOne payment integration.

3 / 3

Distinctiveness Conflict Risk

Highly distinctive with PortOne-specific terminology, bilingual Korean/English trigger terms, and domain-specific concepts like 'billing key', 'PG 연동', and 'V1 and V2 API'. Very unlikely to conflict with other skills.

3 / 3

Total

11

/

12

Passed

Implementation

64%

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

This is a solid, actionable skill with excellent concrete code examples and clear MCP tool guidance. Its main weaknesses are verbosity in explanatory sections (payment types, overview) that Claude doesn't need, and a lack of explicit validation checkpoints in the integration workflow. The 'Critical: Do Not Trust Internal Knowledge' section is the strongest part — it provides clear, specific behavioral constraints that directly prevent common errors.

Suggestions

Add explicit validation checkpoints to the Integration Workflow (e.g., 'Verify MCP tool returned valid code before proceeding to modification' and 'Run integration-validator agent before delivering code to user').

Trim the Payment Types and Overview sections significantly — Claude doesn't need explanations of what online payments or subscription billing are; just list the types with their MCP tool parameters.

Consider splitting MCP tool reference details and webhook implementation into separate bundle files, keeping SKILL.md as a concise overview with pointers.

DimensionReasoningScore

Conciseness

The skill contains some unnecessary explanations (e.g., explaining what PortOne is, listing payment types with obvious descriptions like '카드, 계좌이체' etc.), and the V1 vs V2 comparison section is somewhat padded. However, the critical MCP tool usage section and code examples are reasonably efficient. The payment types section reads more like user-facing documentation than Claude-facing instructions.

2 / 3

Actionability

The skill provides fully executable code examples for SDK loading, payment requests, backend verification, and webhook handling with signature verification. MCP tool names and their parameters are explicitly listed. The webhook example is particularly thorough with the express.raw() middleware ordering caveat and Buffer-to-string conversion.

3 / 3

Workflow Clarity

The Integration Workflow section lists steps but lacks explicit validation checkpoints — there's no 'verify this before proceeding' gate between steps. The common integration patterns are listed as flows but without error recovery or validation loops. The webhook section does include verification steps, but the overall code generation workflow (steps 1-4) lacks feedback loops for when MCP tool queries return unexpected results or when generated code needs validation.

2 / 3

Progressive Disclosure

The content is a single monolithic file with no bundle files or external references. At ~200 lines, sections like the full MCP tool listing, payment type descriptions, and detailed webhook code could be split into separate reference files. The structure within the file is reasonable with clear headers, but the lack of any progressive disclosure to supporting documents means everything is inline.

2 / 3

Total

9

/

12

Passed

Validation

90%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation10 / 11 Passed

Validation for skill structure

CriteriaDescriptionResult

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

10

/

11

Passed

Reviewed

Table of Contents