CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

axiom-audit-iap

Use when the user mentions in-app purchase review, IAP audit, StoreKit issues, purchase bugs, transaction problems, or subscription management.

Quality

70%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./axiom-codex/skills/axiom-audit-iap/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

77%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

This is a highly actionable, well-sequenced audit procedure with executable grep patterns, ready-to-use fixes, and strong validation checkpoints. Its weaknesses are token efficiency — narrative impact prose, redundant Invocation Examples, and a duplicative Scope section — and the absence of any progressive disclosure: everything, including the lengthy pattern catalog, is inlined in the single SKILL.md.

Suggestions

Move the 13-pattern detection catalog (and/or the Phase 3 completeness table) into a references/ file (e.g., references/patterns.md) and keep a one-line-per-pattern index in SKILL.md, cutting main-file tokens substantially.

Trim narrative impact prose to single-line consequence statements (e.g., pattern 13's Issue field and the Phase 3/4 table 'why it matters' columns) and drop the Scope section, which duplicates the frontmatter description.

Reduce Invocation Examples from five near-identical examples to two contrasting ones.

DimensionReasoningScore

Conciseness

The core content is dense and operational (Pattern/Search/Issue/Fix per anti-pattern, no basic-concept explanations), but several sections could be tightened — narrative impact prose in pattern 13 ("the user taps 'Buy' on the product page, the app launches, and nothing happens"), explanatory 'why it matters' text in the Phase 3/4 tables, a 25-line Invocation Examples section, and a Scope section that duplicates the description. This sits between anchors 2 and 3 but the padding is confined rather than pervasive, so 3 fits best.

3 / 5

Actionability

Fully executable throughout: exact grep patterns (e.g., `Transaction\.updates`, `AppStore\.sync`), copy-paste-ready Swift fixes for both StoreKit 1 and 2 promoted-purchase paths, per-pattern severities, an explicit output template, and a false-positive checklist covering common cases.

5 / 5

Workflow Clarity

Phases 1–5 are clearly sequenced with explicit validation checkpoints: every grep match must be Read-verified before reporting, the Architecture Map must be presented before proceeding, findings are cross-validated against a false-positive list, and output limits handle overflow. This is a read-only audit, so the destructive/batch validation cap does not apply.

5 / 5

Progressive Disclosure

The body is well-sectioned with headers, but no references/, scripts/, or assets/ bundle exists — the entire 13-pattern catalog (~120 lines), the Phase 3 completeness table, and the false-positive list are all inlined in one ~350-line SKILL.md. Content that would naturally live one level deep is inline, matching anchor 3; the only external pointers (Related section) reference other skills, not bundle files.

3 / 5

Total

16

/

20

Passed

Description

47%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description has strong, natural trigger terms for a well-defined IAP auditing niche, but it is a pure trigger clause: it never states what the skill does (audits IAP code for missing finish(), weak verification, missing restore, etc.). Adding a concrete 'what' clause would move it into the top tier.

Suggestions

Prepend a concrete 'what' clause, e.g., 'Audits in-app purchase code for missing transaction.finish(), weak receipt verification, missing restore paths, subscription status gaps, and StoreKit testing configuration. Use when...' — this would lift completeness and specificity together.

Add natural trigger synonyms users commonly say: 'paywall', 'receipt validation', 'restore purchases not working', and 'App Store purchases'.

Narrow 'subscription management' to something like 'subscription lifecycle issues' to reduce overlap with implementation-oriented skills.

DimensionReasoningScore

Specificity

The description only lists trigger conditions ("in-app purchase review, IAP audit, StoreKit issues, purchase bugs, transaction problems, or subscription management") with no statement of what the skill actually does — the domain is named but actions are minimal or generic, matching anchor 2 rather than 3, which requires named concrete actions.

2 / 5

Completeness

The 'when' is explicit ("Use when the user mentions...") but the 'what' is entirely absent — only 'when' is present without 'what', matching anchor 2; this is below anchor 3, where a clear 'what' exists and only 'when' is missing.

2 / 5

Trigger Term Quality

Good natural-language coverage ("purchase bugs", "transaction problems", "subscription management", "StoreKit issues", "IAP audit") that users would plausibly say, though common variations like "paywall", "receipt validation", "restore purchases", and "App Store purchases" are missing.

4 / 5

Distinctiveness Conflict Risk

The IAP/StoreKit audit niche is mostly distinct, but "subscription management" and "purchase bugs" carry minor overlap risk with closely related implementation skills the skill itself lists (axiom-implement-iap), fitting anchor 4 rather than 5's 'minimal conflict risk'.

4 / 5

Total

12

/

20

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository

CharlesWiltgen/Axiom

Path

axiom-codex/skills/axiom-audit-iap/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.