CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

hubspot-integration

Authentication for single-account integrations

Quality

41%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./skills/hubspot-integration/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

30%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body reads as an unfinished stub: a topic catalog with one-line labels, anti-patterns with no explanation, a placeholder sharp-edges table whose 'solutions' all say 'See docs' with no docs bundled, and a circular When-to-Use section. Nothing in it would let Claude actually execute a HubSpot integration.

Suggestions

Replace the placeholder Sharp Edges rows ('Issue | high | See docs') with real issues, their actual severities, and concrete solutions, and create the referenced reference files (or link to specific HubSpot docs URLs).

Add executable guidance for each pattern: an OAuth 2.0 flow with the HubSpot authorization/token endpoint examples, a private-app-token request example with headers, and a batch CRUD example using the batch endpoints (the correct alternative to the 'Individual Requests Instead of Batch' anti-pattern).

Rewrite the circular 'When to Use' section ('applicable to execute the workflow or actions described in the overview') with concrete applicability conditions, and give each anti-pattern a one-line reason plus the correct approach.

DimensionReasoningScore

Conciseness

The body is lean with no concept over-explanation and clear headers, but the eight placeholder rows ('Issue | high | See docs') and the circular 'When to Use' sentence ('applicable to execute the workflow or actions described in the overview') are tokens that convey nothing. Fails anchor 5's 'every token earns its place' but is not 'noticeably verbose'.

4 / 5

Actionability

The body only describes rather than instructs: 'Secure authentication for public apps', 'Create, read, update, delete CRM records', and 'See docs' with no code, commands, endpoints, or specific steps anywhere. Matches anchor 1 ('Entirely vague or abstract... only describes rather than instructs'); it cannot score 2 because not even high-level executable hints are given.

1 / 5

Workflow Clarity

Multi-step processes are named (OAuth flow, CRUD, batch vs. individual requests, webhooks vs. polling) but no sequence or steps are provided, and there is no validation despite the skill touching batch/destructive CRUD operations. Matches anchor 1 ('Steps missing or incoherent; no sequence; no validation for risky operations').

1 / 5

Progressive Disclosure

The body is under 50 lines with organized section headers (Patterns, Anti-Patterns, Sharp Edges, When to Use), but every 'See docs' cell in the Sharp Edges table points to documentation that does not exist anywhere in the bundle — references are present but broken/unresolvable. Fits 'Some structure but could be better organized; references present but not clearly signaled'.

3 / 5

Total

9

/

20

Passed

Description

25%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description is a two-word domain fragment: it names a topic but states no concrete capabilities, no trigger guidance, and not even the target platform (HubSpot). It would rarely be selected for the right task and would frequently collide with other integration skills.

Suggestions

List concrete actions, e.g. 'Authenticates to HubSpot via OAuth 2.0 for public apps or private app tokens for single-account integrations, and performs CRUD operations on CRM objects'.

Add an explicit trigger clause, e.g. 'Use when integrating with the HubSpot API, working with HubSpot CRM objects (contacts, deals, companies), or troubleshooting HubSpot auth errors'.

Name HubSpot and its distinctive terms (OAuth 2.0, private app token, CRM objects, webhooks) so the skill is distinguishable from generic authentication skills.

DimensionReasoningScore

Specificity

The description names the domain ('Authentication') with a scope qualifier ('single-account integrations') but lists zero concrete actions, matching the anchor 'Names the domain but actions are minimal or generic'. It cannot score 3 because no concrete actions are stated at all.

2 / 5

Completeness

The 'what' is only a vague domain label (no actions performed) and there is no 'Use when...' clause or equivalent trigger guidance, matching 'Has a vague what and no when'. Not 3, because the 'what' is not clear enough for the clear-what/missing-when anchor.

2 / 5

Trigger Term Quality

The only keywords are generic jargon ('Authentication', 'single-account', 'integrations') — missing the natural phrases a user would actually say such as HubSpot, OAuth, private app token, API key, or CRM. Fits 'One or two generic keywords; missing the natural phrases users say'.

2 / 5

Distinctiveness Conflict Risk

'Authentication for single-account integrations' is very broad and would collide with virtually any auth/integration skill (GitHub, Slack, Stripe, etc.); it does not even mention HubSpot. Fits 'Very broad; high overlap risk with many similar skills'.

2 / 5

Total

8

/

20

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

15

/

16

Passed

Repository

administrakt0r/AI-Agents-Safe-Coding-Skills

Path

skills/hubspot-integration/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.