CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

speckit-updater

SpecKit Safe Update

Quality

60%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Low

Low-risk findings worth noting

Fix and improve this skill with Tessl

tessl review fix ./plugins/AI-Agents-Safe-Coding-Skills/skills/speckit-updater/SKILL.md

The canonical home for this skill is speckit-updater in administrakt0r/AI-Agents-Safe-Coding-Skills

SKILL.md
Quality
Evals
Security

Quality

Content

63%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body is a well-structured, largely actionable operator guide with a clear approval workflow and real safety mechanisms (backups, rollback, prerequisite validation). Its weaknesses are redundancy (the same workflow narrated three times), a hardcoded user-specific path in the main commands, and bundle hygiene — referenced scripts and README.md are not present, and architecture-level detail is inlined instead of split into reference files.

Suggestions

Consolidate the three repeated descriptions of the marker/approval workflow ("What to do when this skill is invoked", "When you invoke this command, I will:", and "Conversational Workflow") into a single authoritative section.

Replace the hardcoded "C:\Users\bobby\.claude\skills\speckit-updater\scripts\update-wrapper.ps1" paths with the {skill_path} placeholder consistently, so the commands are executable for any user.

Ship the referenced bundle files (scripts/update-wrapper.ps1, scripts/update-orchestrator.ps1, README.md) and move the Architecture/Modules and Exit Codes detail into a reference file so SKILL.md stays a lean overview.

DimensionReasoningScore

Conciseness

The body is mostly operational detail rather than explanation of known concepts, but the marker-parsing and approval workflow is described three separate times ("What to do when this skill is invoked", "When you invoke this command, I will:", and "Conversational Workflow"), and the Commands section restates the fresh-install flow. This matches anchor 3: mostly efficient but could be tightened, rather than anchor 2's pervasive padding.

3 / 5

Actionability

Concrete, executable pwsh commands with exact script paths, documented flags for every usage mode, parseable output markers, and an exit-code table give copy-paste-ready guidance. It stops short of 5 because the primary invocations hardcode a user-specific path ("C:\Users\bobby\.claude\skills\...") instead of the {skill_path} placeholder used later.

4 / 5

Workflow Clarity

The two-step approval sequence is explicit and validation is genuinely present (prerequisite checks, fail-fast with automatic rollback, exit codes, approval gate), so the destructive-operation cap does not apply. It is not 5 because agent-side error recovery per exit code (e.g. 3, 4, 6) is not specified and the 4-option conflict-resolution flow is only named, not sequenced.

4 / 5

Progressive Disclosure

Section headers are clear, but the bundle contains none of the files the body references — no scripts/, references/, or assets/ directories exist, so update-wrapper.ps1, update-orchestrator.ps1, and README.md are unverifiable — and detail like the Architecture/Modules breakdown and exit-code table is inlined in SKILL.md where a reference file would keep the overview lean. This sits at anchor 3 rather than 4 due to the broken/missing bundle references and inline bulk content.

3 / 5

Total

14

/

20

Passed

Description

40%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description is a bare title with no capability statement, no trigger guidance, and no indication of when the skill should be used. It names a specific niche (which helps distinctiveness) but fails on completeness and specificity. It needs to be rewritten as a full third-person sentence with an explicit "Use when..." clause.

Suggestions

Replace the title-only description with a full third-person sentence enumerating concrete capabilities, e.g. "Safely updates GitHub SpecKit templates, commands, and scripts while preserving customizations, creating timestamped backups, and resolving conflicts via the VSCode merge editor."

Add an explicit trigger clause, e.g. "Use when the user wants to update, upgrade, or roll back SpecKit templates, or mentions the .specify directory or SpecKit versions."

Include natural synonyms and artifacts users would mention ("SpecKit", "upgrade templates", ".specify/", "manifest.json", "rollback") to improve trigger-term coverage.

DimensionReasoningScore

Specificity

The description is just the title phrase "SpecKit Safe Update" — it names the domain but contains no action verbs describing any capability. It is not entirely vague/abstract (anchor 1), but with zero concrete actions it cannot reach anchor 3.

2 / 5

Completeness

The "what" is only weakly implied by the title (safe updating of SpecKit) and there is no "when"/"Use when..." clause at all — exactly anchor 2 (vague what, no when), and the missing trigger guidance caps it below 3.

2 / 5

Trigger Term Quality

"SpecKit" and "Update" are the natural terms a user would say, but common variations and synonyms ("upgrade", "templates", ".specify", "version") are absent. This matches anchor 3: some relevant keywords, missing variations.

3 / 5

Distinctiveness Conflict Risk

"SpecKit Safe Update" carves a clear niche (a specific GitHub SpecKit tooling domain), so it is mostly distinct with only minor overlap risk against closely related skills like the referenced /speckit.constitution. It falls short of anchor 5 because a bare title provides no distinct trigger phrasing to disambiguate.

4 / 5

Total

11

/

20

Passed

Validation

87%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 14 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

description_field

'description' is very short (19 chars), consider making it more detailed

Warning

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

14

/

16

Passed

Repository

administrakt0r/AI-Agents-Safe-Coding-Skills

Path

plugins/AI-Agents-Safe-Coding-Skills/skills/speckit-updater/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.