CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

dependency-update

Check if Brewfile, Formula, or install script need updating when project dependencies change.

Quality

79%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./devflow-plugin/skills/dependency-update/SKILL.md

The canonical home for this skill is dependency-update in AndreJorgeLopes/devflow

SKILL.md
Quality
Evals
Security

Quality

Content

86%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The content is a lean, well-structured checklist skill with a concrete command, named targets, and a useful report template — it fully respects the token budget and is unambiguous to execute. The only improvements are adding inspection commands or example diffs to steps 2–4 and covering edge cases like missing manifests.

Suggestions

Add the concrete inspection commands for steps 2–4 (e.g. "cat Formula/devflow.rb" or the depends_on lines to look at) so the checks are executable rather than purely advisory.

Include one short example of a NEEDS UPDATE finding (e.g. a new CLI tool added in lib/*.sh mapping to a depends_on entry) to disambiguate what a match looks like.

Specify how to handle a missing manifest (install.sh absent, no project Brewfile vs. ~/Brewfile) so the workflow has no silent gaps.

DimensionReasoningScore

Conciseness

The body contains no concept explanations or padding: an intro line, a short When-to-Run trigger list, concrete check items, one command, a compact report template, and a closing offer — every token earns its place, matching anchor 5 rather than anchor 4's "minor instances of over-explanation".

5 / 5

Actionability

It provides a copy-paste command ("git diff --name-only HEAD~1..HEAD"), named files to inspect ("Formula/devflow.rb", "Brewfile", "install.sh"), and a complete report template, but steps 2–4 are review checklists without inspection commands or examples of a needed update, fitting anchor 4's "concrete code or commands with minor gaps" rather than anchor 5.

4 / 5

Workflow Clarity

Six clearly ordered steps culminate in a per-artifact OK/NEEDS UPDATE report and step 6 closes the loop by offering fixes; the workflow is read-only so the destructive/batch validation cap does not apply, but there are minor gaps (no explicit handling for missing manifests beyond the Brewfile case, no post-update verification), matching anchor 4 rather than anchor 5's explicit validation loop.

4 / 5

Progressive Disclosure

This is a short, self-contained skill with no bundle files and no need for external references; its sections (When to Run, Steps, report template) are well-organized and easy to navigate, which per the simple-skill scoring note merits anchor 5.

5 / 5

Total

18

/

20

Passed

Description

62%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description is concrete, honest, and names its specific artifacts, giving it a clear niche and an explicit (if narrow) when-clause. Its main weaknesses are limited action coverage (only "check" is mentioned) and missing natural trigger variations like "brew" or "Homebrew".

Suggestions

Expand the action coverage, e.g. "Check whether the Homebrew Formula, Brewfile, or install script need updating after dependencies change, and report or apply the required changes."

Add natural trigger variations such as "brew", "Homebrew", "new CLI tool", or "added a dependency" so users' phrasing matches more reliably.

Consider naming the trigger conditions more concretely (e.g. "when new CLI tools or libraries are added") to move the when-clause from general to explicit trigger phrases.

DimensionReasoningScore

Specificity

"Check if Brewfile, Formula, or install script need updating" names concrete artifacts but only one action verb; the report-generation and update-application actions the body actually performs are not mentioned, so coverage is not comprehensive (anchor 3, not 4, which requires several listed actions).

3 / 5

Completeness

The description answers both what ("Check if Brewfile, Formula, or install script need updating") and when ("when project dependencies change") explicitly, but the when is a single general condition rather than concrete trigger phrases, so it fits anchor 4 rather than anchor 5 and clearly above anchor 3's implied-when level.

4 / 5

Trigger Term Quality

Terms like "Brewfile", "install script", and "when project dependencies change" are natural, but common variations such as "brew", "Homebrew", "packages", or "new dependency added" are missing and "Formula" leans technical, matching anchor 3 rather than the fuller coverage of anchor 4.

3 / 5

Distinctiveness Conflict Risk

Naming Brewfile, Formula, and install script pins a clear manifest-sync niche with distinct triggers; the only overlap risk is with generic dependency-update/package-manager skills, which matches anchor 4's "mostly distinct; minor overlap risk" rather than anchor 5's minimal-conflict bar.

4 / 5

Total

14

/

20

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository

AndreJorgeLopes/devflow

Path

devflow-plugin/skills/dependency-update/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.