CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

graphql

You're a developer who has built GraphQL APIs at scale. You've seen the N+1 query problem bring down production servers. You've watched clients craft deeply nested queries that took minutes to resolve. You know that GraphQL's power is also its danger.

Quality

49%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./skills/graphql/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

40%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body reads as a skeleton: an evocative persona intro (duplicated from the frontmatter and cut off mid-sentence), tag lists, empty anti-pattern headings, and one genuinely useful Sharp Edges table — but no code, no executable guidance, and no workflow. Its saving graces are brevity and a clear section structure.

Suggestions

Replace the vague pattern one-liners with concrete guidance, e.g. a minimal DataLoader usage snippet and a depth/complexity limit config for Apollo Server, and flesh out the empty anti-pattern sections with what to do instead

Fix the corrupted intro (the "You've l" truncation) and remove the duplicated persona paragraph and the boilerplate When-to-Use sentence; replace the latter with real trigger conditions

Either define an actual workflow (e.g. review schema → apply DataLoader batching → set depth/cost limits → verify introspection/auth posture) or convert the skill into an explicitly reference-style document so the lack of sequence is intentional

DimensionReasoningScore

Conciseness

The body is short and mostly lean, but it re-inlines the frontmatter persona verbatim, carries a truncated dangling sentence ("You've l"), empty anti-pattern headings, and a filler "This skill is applicable to execute the workflow or actions described in the overview" sentence — unnecessary content that could be cut, matching anchor 3 ("mostly efficient but includes some unnecessary explanation or could be tightened"). It is not noticeably padded enough for anchor 2, and not clean enough for anchor 4.

3 / 5

Actionability

There is no code, command, or executable example anywhere; guidance consists of one-line hints ("Batch and cache database queries", "Type-safe schema with proper nullability") and terse table directives ("# USE DATALOADER", "# LIMIT QUERY DEPTH AND COMPLEXITY") — minimal concrete guidance with the specific steps missing, matching anchor 2. It stays above anchor 1 because the Sharp Edges table maps concrete issues to named solutions rather than merely describing concepts.

2 / 5

Workflow Clarity

No multi-step process is defined: the section order (capabilities → patterns → anti-patterns → sharp edges) gives only a rough orientation with no sequenced steps or checkpoints, matching anchor 2 ("rough sequence present but many gaps; steps poorly defined"). The simple-skill exception does not apply because the skill claims nine capabilities, and anchor 3 is unreachable since there is no actual step list to have gaps in.

2 / 5

Progressive Disclosure

The skill is small (~65-line body) with no bundle files (references/, scripts/, assets/ are absent), so short well-organized sections suffice; headers and the Sharp Edges table give good structure, matching anchor 4 ("good structure; most content is appropriately placed; minor organization gaps"). It misses anchor 5 because the empty anti-pattern sections, truncated sentence, and boilerplate When-to-Use line leave real organization gaps.

4 / 5

Total

11

/

20

Passed

Description

35%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description is a persona-style narrative in second person rather than a capability statement: it evokes GraphQL performance folklore but never says what the skill does or when to invoke it. Its only real asset is the distinct, well-scoped GraphQL domain.

Suggestions

Rewrite the description in third person as a capability statement, e.g. "Designs GraphQL schemas, prevents N+1 queries with DataLoader, and limits query depth/complexity..."

Add an explicit 'Use when...' clause naming natural trigger phrases such as "Use when working with GraphQL schemas, resolvers, Apollo Server/Client, or N+1 query performance issues"

Include concrete action verbs and key ecosystem terms (schema, resolver, DataLoader, federation, subscriptions) so the description both states capabilities and covers natural trigger vocabulary

DimensionReasoningScore

Specificity

The description is a second-person persona narrative ("You're a developer who has built GraphQL APIs at scale", "You've seen the N+1 query problem") that names the domain but lists zero concrete actions the skill performs, which already caps it at the anchor-2 level ("names the domain but actions are minimal or generic"); the mandatory one-point penalty for second-person voice ("You're", "You've") per the judging guidelines reduces it to 1. Not even generic skill actions are stated, so it cannot reach anchor 2 after the penalty.

1 / 5

Completeness

The 'what' is only implied as GraphQL expertise at scale and the 'when' is entirely absent — there is no 'Use when...' clause or equivalent trigger guidance anywhere, matching anchor 2 ("has a vague 'what' and no 'when'"). It does not reach anchor 3 because even the 'what' is a persona vignette rather than a statement of capability, and the missing-use-when cap rules out anything above 3 regardless.

2 / 5

Trigger Term Quality

"GraphQL" and "GraphQL APIs" are natural terms users would say, plus domain phrases like "N+1 query problem" and "deeply nested queries", but many common variations users actually use are missing (schema, resolver, query, Apollo, federation, subscriptions, batching), matching anchor 3 ("some relevant keywords but missing common variations or synonyms"). It falls short of anchor 4's "good keyword coverage" because the only strong natural trigger is the single word GraphQL.

3 / 5

Distinctiveness Conflict Risk

"GraphQL APIs" carves a clear niche with minor overlap risk only against closely related skills (backend, API design, database skills), matching anchor 4. It cannot reach anchor 5 because distinct triggers and explicit use-when guidance are absent, and anchor 3 understates how specific the GraphQL domain is.

4 / 5

Total

10

/

20

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

15

/

16

Passed

Repository

administrakt0r/AI-Agents-Safe-Coding-Skills

Path

skills/graphql/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.