CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

a2a-protocol

How agent-native apps discover, authenticate with, and call each other over A2A. Use when connecting one app to another, debugging a remote agent that won't authenticate, exposing skills to peers, or calling agents from scripts.

Quality

82%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Low

Low-risk findings worth noting

SKILL.md
Quality
Evals
Security

Quality

Content

78%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

An information-dense internal protocol reference that is highly actionable and largely token-efficient, with real validation checkpoints built in. Its main weakness is structure: everything lives in one monolithic SKILL.md with no progressive disclosure, including provider and API detail that would sit better in dedicated reference files.

Suggestions

Move the hosted-provider sections (Foundry, Gemini Enterprise, Anthropic Managed Agents) into a references/ file (e.g., references/hosted-providers.md) and keep a two- or three-line pointer per provider in SKILL.md; this also isolates the version- and date-sensitive details.

Extract the deep authentication material (JWT scopes, org-secret delegation, org-domain binding) into references/authentication.md, leaving the shared-secret rule, the credential-scope table, and failure-mode table inline.

Replace the full "All Types" import listing with a short pointer to the A2AConfig/A2AClient type exports, mentioning only the handful of types used in the examples.

DimensionReasoningScore

Conciseness

Dense, imperative prose where nearly every sentence carries non-obvious internal-framework rules (JWT scopes, secret semantics, org-identity delegation), though the task-lifecycle state bullets and message-parts table restate what their names already convey, and the "don't bypass A2A" rule is repeated a few times.

4 / 5

Actionability

Executable, import-complete code for callAgent(), invokeAgentAction(), and A2AClient, a copy-paste registration manifest, concrete endpoints (/_agent-native/a2a, the probe URL), env var names, and typed error codes cover the common cases end to end.

5 / 5

Workflow Clarity

Connecting is framed as two explicit prerequisites plus four creation surfaces, with a genuine validation checkpoint (the peer probe returning reachable/authorized and flagging reachable-but-unauthorized) and explicit failure-mode tables; it is not laid out as an end-to-end sequenced procedure with recovery loops, so it stops short of anchor 5.

4 / 5

Progressive Disclosure

Section headers and navigation are good, but the ~530-line file is monolithic with no bundle files: the provider-specific guides (Foundry, Gemini Enterprise, Anthropic Managed Agents), the deep auth material, and the full type listing clearly belong in separate one-level-deep reference files.

3 / 5

Total

16

/

20

Passed

Description

83%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong description: third-person, concise, explicit about both capability and trigger conditions with four concrete use-when scenarios. Only slight gains available from adding natural synonyms such as "agent-to-agent" or "peer agents".

DimensionReasoningScore

Specificity

"discover, authenticate with, and call each other over A2A" names the domain plus three concrete protocol-level actions; minor gaps in coverage (no mention of task lifecycle, streaming, or capability advertising) keep it below anchor 5, but it is well above the 1-2-action anchor.

4 / 5

Completeness

It clearly answers "what" (discover, authenticate with, and call peers over A2A) and "when" with an explicit "Use when..." clause listing four concrete trigger scenarios, matching the anchor exactly.

5 / 5

Trigger Term Quality

Natural trigger phrases like "connecting one app to another", "debugging a remote agent that won't authenticate", and "calling agents from scripts" cover what users would actually say; a few natural synonyms (e.g., "agent-to-agent" spelled out, "peer agent") are missing, so it falls just short of the comprehensive-synonyms anchor.

4 / 5

Distinctiveness Conflict Risk

The A2A/agent-native niche with triggers like "exposing skills to peers" is mostly distinct and unlikely to fire for the wrong skill; minor overlap risk remains with adjacent delegation or MCP-style integration skills.

4 / 5

Total

17

/

20

Passed

Validation

75%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 12 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

skill_md_line_count

SKILL.md is long (542 lines); consider splitting into references/ and linking

Warning

metadata_version

'metadata.version' is missing

Warning

metadata_field

'metadata' should map string keys to string values

Warning

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

12

/

16

Passed

Repository

BuilderIO/agent-native

Path

.agents/skills/a2a-protocol/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.