CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

http-api-cloudbase

CloudBase official HTTP API client guide. This skill should be used when backends, scripts, or non-SDK clients must call CloudBase platform APIs over raw HTTP instead of using a platform SDK or MCP management tool.

Quality

71%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./plugin/cloudbase/skills/http-api-cloudbase/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

57%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A well-scoped integration guide with genuinely actionable tool-call syntax, URL templates, and an appropriate body-to-reference split. Its weaknesses are structural: duplicated scoping/API-list sections inflate token cost, the workflow lacks validation checkpoints, and the checklist.md reference is broken and absent from the reference index.

Suggestions

Add validation checkpoints to the 'How to use this skill' workflow: e.g., verify credentials with a simple GET before full implementation, and define a fix-and-retry loop for auth errors based on the swagger's error response formats.

Fix the broken [checklist.md](checklist.md) reference — the file does not exist in the bundle; either ship it or remove the 'Minimal checklist' step, and make the 'Reference index' list every referenced path.

Deduplicate the body: the searchKnowledgeBase apiName list appears twice nearly verbatim (in 'How to use' step 4 and the 'OpenAPI Swagger Documentation' section), and 'When to use this skill' restates the Activation Contract — merge each pair into one section.

DimensionReasoningScore

Conciseness

The body is mostly signal (auth methods, URL templates, tool invocation syntax), but the searchKnowledgeBase API-name list appears twice nearly verbatim ('How to use' step 4 and the 'OpenAPI Swagger Documentation' section), the 'When to use this skill' section duplicates the Activation Contract's 'Use this first when'/'Do NOT use for' lists, and the domestic/international URL blocks and the angle-bracket placeholder warning ("replace the entire part including angle brackets") repeat explanations Claude doesn't need. This is tighter than the 'several padded sections' of a 2, but the duplication is more than 'some' — it sits at the boundary, and the core content remains efficient.

3 / 5

Actionability

Concrete, executable guidance throughout: exact tool calls like `searchKnowledgeBase({ mode: "openapi", apiName: "mysqldb" })`, concrete URL templates with worked examples ('https://cloud1-abc.api.tcloudbasegateway.com'), and a copy-paste header format ('Authorization: Bearer eymykey'). Not a 5 because the body never shows one complete end-to-end request example (a full curl of a real endpoint with auth); full examples are only in the extended guide, leaving a minor gap in the main file.

4 / 5

Workflow Clarity

The 4-step 'How to use' sequence (clarify scenario → determine base URL → set up auth → reference OpenAPI) is clearly ordered and well defined, which rules out a 2. But there are no validation checkpoints: no step to verify credentials with a simple test call before implementing, and no error-handling/retry loop (error formats are only listed as something to 'verify' in the swagger, with no guidance on what to do on failure). The referenced 'Minimal checklist' that might supply this points to a missing file. Steps present, checkpoints absent — matches the 3 anchor.

3 / 5

Progressive Disclosure

The split is structurally sound: the 228-line body stays overview-level and delegates bulk examples to references/extended-guide.md, which exists and is one level deep. However, the body references [HTTP API Routing Checklist](checklist.md) and no checklist.md exists anywhere in the bundle, and the 'Reference index' lists only extended-guide.md, omitting that same checklist — navigation breaks for a referenced path. Good skeleton, but broken and unindexed references keep this below the 4 anchor's 'minor organization gaps'.

3 / 5

Total

13

/

20

Passed

Description

73%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong description with an explicit, well-scoped trigger clause and excellent negative scoping against sibling SDK/MCP skills. Its only weakness is that the 'what' stays at the 'guide' level of abstraction rather than naming the concrete capabilities (database, auth, functions, storage, AI) it actually covers.

DimensionReasoningScore

Specificity

It names the domain ('CloudBase official HTTP API client guide') and one concrete action ('call CloudBase platform APIs over raw HTTP'), matching the 3 anchor ('names domain and 1-2 concrete actions, but not comprehensive'). Not a 4 because it never enumerates the specific capabilities it covers (database, auth, functions, storage, AI — all listed only in the body); not a 2 because it goes beyond naming the domain to state what the client does and how.

3 / 5

Completeness

Both parts are present: what ('CloudBase official HTTP API client guide') and an explicit when ('This skill should be used when backends, scripts, or non-SDK clients must call CloudBase platform APIs over raw HTTP instead of using a platform SDK or MCP management tool'). The when clause is concrete and scenario-based, but the what is a thin 'guide' label without the concrete capability list the 5 anchor requires, so it fits the 4 anchor ('when' explicit, 'what' could be more specific).

4 / 5

Trigger Term Quality

Good natural-term coverage: 'CloudBase', 'HTTP API', 'backends', 'scripts', 'non-SDK clients', 'raw HTTP', 'SDK', 'MCP management tool' — phrasings users would plausibly say when needing this skill. Falls short of the 5 anchor's 'comprehensive coverage including synonyms and file extensions' because common variants like 'REST API', 'RESTful', or 'curl' are absent.

4 / 5

Distinctiveness Conflict Risk

Clear niche with explicit negative scoping: 'instead of using a platform SDK or MCP management tool' directly disambiguates against the sibling SDK and MCP skills that would otherwise collide. 'Non-SDK clients' and 'raw HTTP' further sharpen the triggers, giving minimal conflict risk — a clean match for the 5 anchor.

5 / 5

Total

16

/

20

Passed

Validation

87%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 14 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

relative_links

Relative link issues: 1 missing

Warning

Total

14

/

16

Passed

Repository

TencentCloudBase/CloudBase-AI-Toolkit

Path

plugin/cloudbase/skills/http-api-cloudbase/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.