CtrlK
BlogDocsLog inGet started
Tessl Logo

azure-postgres-ts

Connect to Azure Database for PostgreSQL Flexible Server from Node.js/TypeScript using the pg (node-postgres) package.

55

Quality

63%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./plugins/AI-Agents-Safe-Coding-Skills/skills/azure-postgres-ts/SKILL.md

The canonical home for this skill is azure-postgres-ts in administrakt0r/AI-Agents-Safe-Coding-Skills

SKILL.md
Quality
Evals
Security

Quality

Content

65%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The content is highly actionable with comprehensive, executable code covering authentication, pooling, transactions, and token refresh. It is held back by repeated config boilerplate, a filler closing section, no validation checkpoints on destructive DB operations, and a monolithic structure with no progressive disclosure to separate files.

Suggestions

De-duplicate the connection-config boilerplate by defining it once and reusing it, or by showing only the differing parts in subsequent examples.

Add explicit validation/verification checkpoints to destructive workflows (e.g. verify affected row counts or query results before COMMIT) to lift workflow_clarity above the destructive-ops cap.

Move the advanced token-refresh Pool class and the type/error reference tables into one-level-deep reference files (e.g. references/token-refresh.md) and signal them from the body, and remove or replace the vacuous 'When to Use' line.

DimensionReasoningScore

Conciseness

The body is mostly executable code without basic-concept padding, but the same Client/Pool connection-config block (host/database/user/password/port/ssl) is repeated verbatim across five or more examples, and the 'When to Use' section is pure filler ('applicable to execute the workflow or actions described in the overview'), so it could be tightened rather than being fully lean.

3 / 5

Actionability

Copy-paste-ready, fully executable code spans the common cases — single client, pool, parameterized queries, transactions, a typed-query helper, a complete Entra ID token-refresh Pool class, and error handling keyed to specific PostgreSQL error codes — matching the anchor for fully executable guidance covering common cases.

5 / 5

Workflow Clarity

The transaction examples show a clear BEGIN/COMMIT/ROLLBACK sequence, but destructive database operations (INSERTs, transactions) lack explicit validation/verification checkpoints, so per the rubric's destructive-operations cap workflow_clarity cannot exceed 3.

3 / 5

Progressive Disclosure

Sections are well-organized with headers and tables, but the skill is a >50-line monolith with no bundle files, and substantial advanced content (the token-refresh Pool class, type/error references, config tables) is inlined rather than split into one-level-deep reference files.

3 / 5

Total

14

/

20

Passed

Description

61%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description is specific and well-targeted to a clear niche, with good natural keyword coverage. Its main weakness is the missing 'Use when...' trigger guidance, which caps completeness at 3.

Suggestions

Append an explicit 'Use when...' clause, e.g. 'Use when connecting a Node.js or TypeScript app to Azure Database for PostgreSQL Flexible Server, or when setting up password or Entra ID (passwordless) authentication with the pg package.'

Broaden trigger terms with informal synonyms users commonly say, such as 'Azure Postgres' and 'Flexible Server'.

Consider naming a second concrete capability (e.g. connection pooling or Entra ID token refresh) to lift specificity above a single action.

DimensionReasoningScore

Specificity

Names the concrete domain ('Azure Database for PostgreSQL Flexible Server') and a concrete action ('Connect...using the pg (node-postgres) package'), but lists only a single action so coverage is not comprehensive — matching the anchor for 1-2 concrete actions rather than the several required for a 4.

3 / 5

Completeness

It clearly states what the skill does ('Connect to Azure Database for PostgreSQL Flexible Server...') but provides no 'Use when...' clause or equivalent trigger guidance, so per the rubric guideline completeness is capped at 3.

3 / 5

Trigger Term Quality

Includes strong natural terms a user would say — 'Azure Database for PostgreSQL Flexible Server', 'Node.js/TypeScript', and the synonym pair 'pg (node-postgres)' — giving good keyword coverage, though a few informal variants like 'Azure Postgres' are absent.

4 / 5

Distinctiveness Conflict Risk

The combination of Azure PostgreSQL Flexible Server, Node.js/TypeScript, and the pg package carves a mostly-distinct niche with only minor overlap risk against generic PostgreSQL skills, fitting 'mostly distinct' rather than the fully-conflict-free 5.

4 / 5

Total

14

/

20

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

15

/

16

Passed

Repository
administrakt0r/AI-Agents-Safe-Coding-Skills
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.