CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

api-tester

Use this skill when the user wants to test an API, validate endpoints, check response schemas, run API test suites, or do load testing.

Quality

85%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Low

Low-risk findings worth noting

SKILL.md
Quality
Evals
Security

Quality

Content

82%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A tight, highly actionable reference skill: executable code throughout, no token waste, and clear sectioning. The main weakness is the YAML test-suite example declaring expectations (expect_schema, expect_contains) that the provided runner does not implement, which slightly undermines both actionability and the suite workflow's validation story.

Suggestions

Make run_test_suite honor 'expect_schema' (via the included jsonschema validator) and 'expect_contains', or remove those keys from the YAML example so the format and runner agree.

Add a brief failure-handling note to the test-suite section (e.g., report failures, re-run only failed tests) to complete the feedback loop.

Consider moving the auth patterns and async load-testing sections into references/ files (e.g., AUTH.md, LOAD-TESTING.md) linked from the overview to keep SKILL.md leaner.

DimensionReasoningScore

Conciseness

The body is lean: an overview line, executable code per section, and a quick-reference table, with no explanation of concepts Claude already knows and no padded prose. Every section earns its tokens; only tiny phrases like 'Sync, great for scripts' are filler, which does not drop it below the 5 anchor.

5 / 5

Actionability

Nearly all code is copy-paste executable and covers the common cases (single request, JSON-schema validation, four auth patterns, YAML suite runner, async load test with percentiles). It falls short of the 5 anchor because the YAML format declares 'expect_schema' and 'expect_contains' expectations that run_test_suite never checks, so the suite example is not fully consistent with the runner.

4 / 5

Workflow Clarity

Each recipe is unambiguous and the suite runner has a clear sequence (load YAML, substitute env vars, execute, report pass/fail per test), with pass/fail and error counts acting as checkpoints. It stays at 4 rather than 5 because there is no failure-handling guidance (what to do when tests fail) and the unimplemented expectations weaken the suite's validation step; it is above the 3 anchor since checkpoints are present in the code, not merely implicit.

4 / 5

Progressive Disclosure

The single file is well organized into clearly headed sections of appropriate size, with no dead or nested references (no bundle files exist to verify). It does not reach the 5 anchor because at ~155 lines the advanced material (auth patterns, async load testing) could be split into one-level-deep reference files to keep the overview leaner.

4 / 5

Total

17

/

20

Passed

Description

80%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong description with explicit 'Use when...' trigger guidance and five concrete, naturally-phrased capabilities. Its main gaps are the absence of a standalone 'what' statement and a few missing synonyms (REST/GraphQL, integration/smoke testing).

Suggestions

Add a leading capability sentence in third person (e.g., 'Tests REST and GraphQL APIs: validates status codes, response schemas, auth flows, and performance.') so the 'what' is explicit rather than embedded in the trigger clause.

Include common synonyms such as 'REST', 'GraphQL', 'integration tests', or 'smoke tests' in the trigger list to broaden natural-term coverage.

Clarify the load-testing trigger (e.g., 'load or performance testing of an API') to reduce overlap with generic performance skills.

DimensionReasoningScore

Specificity

The description lists multiple concrete actions — 'test an API, validate endpoints, check response schemas, run API test suites, or do load testing' — each a specific, discrete capability, matching the comprehensive-coverage anchor. It is not below this level because nothing is generic or padded, and there is no clearly missing major capability from the description's own enumeration.

5 / 5

Completeness

Both 'what' and 'when' are present — the trigger clause 'Use this skill when the user wants to...' enumerates the concrete actions it performs — but the 'what' is embedded in the 'when' clause rather than stated as an explicit capability sentence (e.g., 'Tests REST and GraphQL APIs...'). It is above the 3 anchor because the 'when' guidance is explicit and the actions are concrete, not weakly implied.

4 / 5

Trigger Term Quality

Natural phrases users would say are present: 'test an API', 'validate endpoints', 'check response schemas', 'load testing'. A few common variations are missing — e.g., 'REST', 'GraphQL', 'integration test', 'smoke test', 'hit an endpoint' — so it sits at good-but-not-comprehensive coverage rather than the 5 anchor's synonym/extension-level coverage.

4 / 5

Distinctiveness Conflict Risk

The description stays squarely in the API-testing niche ('validate endpoints', 'check response schemas', 'API test suites', 'load testing'), giving it mostly distinct triggers. It is below the 5 anchor only because 'test an API' and 'load testing' carry minor overlap risk with general HTTP-request or performance-testing skills.

4 / 5

Total

17

/

20

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository

ProwlrBot/prowlr-marketplace

Path

skills/api-tester/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.