CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

rest-graphql-debug

Debug REST/GraphQL APIs: status codes, auth, schemas, repro.

60

Quality

75%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Low

Low-risk findings worth noting

Fix and improve this skill with Tessl

tessl review fix ./optional-skills/software-development/rest-graphql-debug/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

77%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body is an unusually actionable, well-sequenced debugging playbook with executable code at every step. Its weaknesses are length — basic HTTP semantics re-explained and everything inlined in one file with no progressive disclosure or reference files.

Suggestions

Move the HTTP Status Playbook, Regression Test Template, and Security/leak checklist into references/ files (e.g. references/status-codes.md, references/regression-tests.md) linked from a lean SKILL.md overview.

Cut re-explanations of HTTP semantics Claude already knows — e.g. the definitional glosses on 401/403/404/5xx — and keep only the diagnostic checklists.

Trim the quickstart duplication: the terminal/REST and execute_code sections repeat request patterns shown again in the layered flow steps.

DimensionReasoningScore

Conciseness

The layered flow and non-obvious gotchas (data= vs json=, GraphQL 200-with-errors, tuple timeouts) earn their tokens, but sections re-explain HTTP semantics Claude already knows ("403 Forbidden — authenticated but not authorized", "404 Not Found — resource doesn't exist", "5xx — server-side, usually not your fault") and the ~500-line body could be tightened — the 'mostly efficient with some unnecessary explanation' anchor rather than 4's minor trimming.

3 / 5

Actionability

Fully executable copy-paste material throughout: curl commands, requests snippets with correct timeouts, JWT decode with proper base64url padding, a backoff function, a contract validator, a pytest smoke suite, and report templates — matching the 'fully executable, covers common cases' anchor.

5 / 5

Workflow Clarity

The ordered six-layer chain (with the 1.5 timeout refinement) gives each step a verification command and failure-mode list, plus checklists (auth checklist, leak checklist) and explicit checkpoints ("curl -v to confirm", "Always inspect content-type before calling .json()"), matching the anchor with clear sequence, explicit validation, and checklists.

5 / 5

Progressive Disclosure

No bundle files exist and all ~500 lines — including the HTTP status playbook, full pytest regression template, and security checklist that clearly belong in reference files — are inlined in one SKILL.md; section headers provide decent navigation, matching the 'some structure, content that should be separate is inline' anchor rather than 2's no-headers monolith.

3 / 5

Total

16

/

20

Passed

Description

66%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description is compact and specific with natural trigger keywords, but it answers only 'what' and never 'when'. Adding an explicit 'Use when...' clause would resolve its main weakness.

Suggestions

Append a trigger clause, e.g. "Use when an API returns unexpected status codes or bodies, auth fails, requests work in Postman but not in code, or when building API integration tests."

Include user-natural variations such as "endpoint", "401/403", "curl", "webhook", and "API integration" to strengthen trigger-term coverage.

Add one or two concrete action verbs beyond the single "Debug" (e.g. "diagnose", "reproduce", "write regression tests for") to raise specificity.

DimensionReasoningScore

Specificity

"Debug REST/GraphQL APIs: status codes, auth, schemas, repro" names the domain plus four concrete coverage areas, matching the 'lists several specific items with minor gaps' anchor; it falls short of 5 because a single verb governs a topic list rather than comprehensive distinct actions.

4 / 5

Completeness

The 'what' is clear ("Debug REST/GraphQL APIs: status codes, auth, schemas, repro") but there is no 'Use when...' clause or equivalent trigger guidance anywhere, which the judging guidelines explicitly cap at 3 — exactly the 'clear what, missing when' anchor.

3 / 5

Trigger Term Quality

"REST", "GraphQL", "APIs", "auth", "status codes", "repro" are all natural user phrasings with good coverage, but common variations like "endpoint", "401/403", "curl", "webhook", or "integration" are missing, placing it above anchor 3 and below the synonym-and-extension-level coverage of 5.

4 / 5

Distinctiveness Conflict Risk

"Debug REST/GraphQL APIs" carves a recognizable niche with distinct triggers, but broad terms like "debug" and "auth" leave minor overlap risk with general debugging and testing skills, so it fits 'mostly distinct; minor overlap risk' rather than the minimal-conflict 5.

4 / 5

Total

15

/

20

Passed

Validation

75%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 12 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

skill_md_line_count

SKILL.md is long (516 lines); consider splitting into references/ and linking

Warning

metadata_version

'metadata.version' is missing

Warning

metadata_field

'metadata' should map string keys to string values

Warning

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

12

/

16

Passed

Repository

NousResearch/hermes-agent

Path

optional-skills/software-development/rest-graphql-debug/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.