CtrlK
BlogDocsLog inGet started
Tessl Logo

plaid-fintech

Create a linktoken for Plaid Link, exchange publictoken for accesstoken. Link tokens are short-lived, one-time use. Access tokens don't expire but may need updating when users change passwords.

46

Quality

48%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Medium

Suggest reviewing before use

Fix and improve this skill with Tessl

tessl review fix ./plugins/AI-Agents-Safe-Coding-Skills-claude/skills/plaid-fintech/SKILL.md

The canonical home for this skill is plaid-fintech in administrakt0r/AI-Agents-Safe-Coding-Skills

SKILL.md
Quality
Evals
Security

Quality

Content

40%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body is well-structured and token-lean but lacks executable guidance: no request payloads or code, and the link/exchange workflow is not sequenced with validation checkpoints. The placeholder Sharp Edges table and vague When-to-Use add noise without value.

Suggestions

Add concrete, copy-paste-ready HTTP request examples (with required payloads and headers) for link token creation and the public_token exchange.

Sequence the link-token → exchange → API-call workflow as numbered steps with validation checkpoints (e.g., verify the access_token returns accounts before proceeding).

Replace the placeholder Sharp Edges table (every row 'Issue'/'See docs') with real edge cases and solutions, or remove it; rewrite 'When to Use' with concrete triggers.

DimensionReasoningScore

Conciseness

The Patterns section is lean and assumes Claude's knowledge (no 'what is Plaid' padding), but the 8-row Sharp Edges table of literal 'Issue'/'See docs' placeholders and the filler 'When to Use' line are unnecessary content that should be tightened. Not 4 because the placeholder table is more than a minor instance; not 2 because the core content is genuinely efficient rather than noticeably verbose.

3 / 5

Actionability

It names endpoints ('/transactions/sync', '/transactions/get') and error/webhook codes (ITEM_LOGIN_REQUIRED, PENDING_DISCONNECT) but provides no concrete request examples, payloads, or code — only high-level hints. Not 3 because there is not even pseudocode, just directives; not 1 because it does identify specific endpoints and codes rather than being entirely abstract.

2 / 5

Workflow Clarity

The link-token-to-access-token exchange is a multi-step flow but is stated in a single sentence with no sequenced steps and no validation checkpoints; token exchange and item-error handling are operations that warrant validation. Not 3 because steps are not actually listed (only a rough create-then-exchange notion), and validation is entirely absent; the destructive/batch cap of 3 would apply but does not force a 3.

2 / 5

Progressive Disclosure

The body is under 50 lines with no external references (no references/scripts/assets bundles) and is organized into clear sections (Patterns, Anti-Patterns, Sharp Edges, When to Use), satisfying the simple-skill exception. Not 5 because the placeholder Sharp Edges table and filler When-to-Use are minor organization gaps; not 3 because structure is genuinely good and content is appropriately placed.

4 / 5

Total

11

/

20

Passed

Description

57%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description names a specific niche (Plaid) and two concrete actions but omits any 'Use when' trigger guidance, which caps completeness. Trigger terms are mostly technical API identifiers rather than natural user phrases.

Suggestions

Add an explicit 'Use when...' clause naming trigger phrases (e.g., 'Use when integrating Plaid, connecting bank accounts, or exchanging Plaid Link tokens').

Broaden action coverage beyond link/exchange (e.g., retrieve accounts, balances, transactions, identity) to push specificity toward 4-5.

Include natural user-facing synonyms like 'Plaid integration', 'connect bank account', or 'Link bank' alongside the technical token terms.

DimensionReasoningScore

Specificity

Quotes 'Create a link_token for Plaid Link' and 'exchange public_token for access_token' name the domain plus 1-2 concrete actions, but coverage is not comprehensive (no accounts/balances/identity actions). Not 4 because only two actions are listed; not 2 because the actions are concrete rather than minimal or generic.

3 / 5

Completeness

A clear 'what' is present (create link token, exchange public token, token lifetime notes) but there is no 'Use when...' clause, capping completeness at 3 per the guidelines. Not 4 because 'when' is entirely missing rather than merely weak.

3 / 5

Trigger Term Quality

'Plaid Link', 'link_token', 'public_token', and 'access_token' give some relevant keywords, but they lean technical and natural user phrases ('connect bank account', 'Plaid integration', 'Link') are missing. Not 4 because common natural synonyms are absent; not 2 because 'Plaid'/'Plaid Link' are more than one or two generic keywords.

3 / 5

Distinctiveness Conflict Risk

'Plaid Link' / 'link_token' describe a clear niche with distinct triggers and minimal conflict risk with other skills. Not 4 because the niche is sharply distinct rather than having minor overlap.

5 / 5

Total

14

/

20

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

15

/

16

Passed

Repository
administrakt0r/AI-Agents-Safe-Coding-Skills
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.