CtrlK
BlogDocsLog inGet started
Tessl Logo

dependency-update

Check if Brewfile, Formula, or install script need updating when project dependencies change.

60

Quality

68%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./devflow-plugin/skills/dependency-update/SKILL.md

The canonical home for this skill is dependency-update in AndreJorgeLopes/devflow

SKILL.md
Quality
Evals
Security

Quality

Content

75%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The content is a well-structured, mostly executable review workflow with a concrete command and report template. Its main gap is the absence of an explicit validation/re-verify loop before proposing manifest edits.

Suggestions

Add an explicit re-verify checkpoint after listing required changes (e.g., confirm each proposed edit against the actual changed files before applying).

Make the per-file review steps more concrete by showing the specific lines/fields to inspect in Formula/devflow.rb and install.sh.

Replace the generic "Look for changes in dependency-sensitive files" with a direct reference to the file list already given in When to Run.

DimensionReasoningScore

Conciseness

The body is lean with a concrete command and a compact report template, with only minor redundant phrasing like "Look for changes in dependency-sensitive files" that could be trimmed.

4 / 5

Actionability

It provides an executable command (git diff --name-only HEAD~1..HEAD) and a copy-paste report template, while the per-file review steps are checklists rather than executable commands.

4 / 5

Workflow Clarity

A clear six-step sequence with a verdict checkpoint (IN SYNC / NEEDS UPDATES); the review steps themselves act as validation, though no explicit re-verify loop is given before offering changes.

4 / 5

Progressive Disclosure

The skill is self-contained with well-organized sections (When to Run, Steps, report template) and needs no external references, just shy of ideal organization for a short single-file skill.

4 / 5

Total

16

/

20

Passed

Description

62%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description clearly communicates a focused niche and an explicit trigger condition, but is light on action variety and natural-language synonyms. It answers both what and when concisely.

Suggestions

Add 1-2 more concrete actions beyond "check" (e.g., "review and update Brewfile, Formula, or install scripts").

Include natural trigger phrasings users would say, such as "Use when adding or changing a CLI dependency".

Mention file extensions or synonyms (e.g., ".rb Formula", "Homebrew tap") to broaden trigger-term coverage.

DimensionReasoningScore

Specificity

Names the domain and three concrete artifacts ("Brewfile, Formula, or install script") but offers only a single action verb ("Check if... need updating"), so coverage is not comprehensive.

3 / 5

Completeness

It states both what ("Check if... need updating") and an explicit when ("when project dependencies change"), though the trigger could list more specific user phrases.

4 / 5

Trigger Term Quality

Relevant niche keywords ("Brewfile", "Formula", "install script", "project dependencies change") are present, but common synonyms and file extensions users might say are missing.

3 / 5

Distinctiveness Conflict Risk

The niche is specific to a project's packaging manifests with distinct triggers, carrying only minor overlap risk with general dependency skills.

4 / 5

Total

14

/

20

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository
AndreJorgeLopes/devflow
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.