CtrlK
BlogDocsLog inGet started
Tessl Logo

telegram-mini-app

You build apps where 800M+ Telegram users already are. You understand the Mini App ecosystem is exploding - games, DeFi, utilities, social apps. You know TON blockchain and how to monetize with crypto. You design for the Telegram UX paradigm, not traditional web.

36

Quality

34%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Medium

Suggest reviewing before use

Fix and improve this skill with Tessl

tessl review fix ./skills/telegram-mini-app/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

32%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

This skill provides a broad but shallow overview of Telegram Mini App development with some useful code snippets, but suffers from significant structural and quality issues. The content is padded with marketing-style language and obvious UX advice, while critical security guidance (initData validation) is flagged but never provided. The Sharp Edges table references non-existent sections, and there is no coherent workflow tying the disconnected patterns together.

Suggestions

Remove the 'Capabilities' bullet list, marketing language ('800M+ users', 'ecosystem is exploding'), and obvious UX anti-pattern explanations — these waste tokens on things Claude already knows.

Add the actual implementation for initData validation server-side, since it's flagged as high-severity but completely missing — this is a critical security gap.

Create a sequential workflow section (e.g., '1. Set up bot → 2. Create Mini App HTML → 3. Validate initData → 4. Deploy and test') with explicit validation checkpoints.

Either create the referenced sections in Sharp Edges ('## Validating initData', '## TON Connect Mobile Issues', etc.) or remove the broken references and inline the solutions directly in the table.

DimensionReasoningScore

Conciseness

The skill is noticeably verbose with unnecessary explanations Claude already knows (e.g., '800M+ Telegram users', 'ecosystem is exploding', explaining what revenue streams are). The 'Capabilities' list is a pure padding section that adds no actionable value. Anti-patterns explain obvious UX principles ('Users think it's broken', 'Poor perceived performance') that Claude inherently understands. The 'When to Use' section at the end is completely vacuous.

2 / 5

Actionability

The code examples are mostly concrete and near-executable (HTML setup, React hooks, TON Connect, bot commands), but there are issues: the code blocks are nested inside incorrectly formatted outer code blocks (markdown headers inside code fences), the Sharp Edges table references solutions (e.g., '## Validating initData') that don't exist anywhere, and the initData validation — a critical security step — is entirely missing despite being flagged as high severity.

3 / 5

Workflow Clarity

There is no clear sequential workflow for building a Mini App end-to-end. The content is organized as disconnected pattern snippets without sequencing or validation checkpoints. Critical steps like validating initData server-side (flagged as high severity in Sharp Edges) have no actual implementation provided. There are no feedback loops or verification steps for any of the processes described.

2 / 5

Progressive Disclosure

With no bundle files, all content is inlined in a single monolithic file. The Sharp Edges table references sections ('## Validating initData', '## TON Connect Mobile Issues') that don't exist anywhere, creating broken navigation. The 'Related Skills' section references other skills but provides no links. Content like the full TON Connect integration and monetization patterns could benefit from being in separate referenced files.

2 / 5

Total

9

/

20

Passed

Description

36%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description uses second-person voice ('You build', 'You understand', 'You know') which violates the third-person convention and reads more like marketing copy than a functional skill description. It lacks concrete actions, has no 'when to use' guidance, and relies on hype language ('exploding', '800M+ users') rather than specifying what the skill actually does. The Telegram/TON domain focus provides some distinctiveness but is undermined by vague capability statements.

Suggestions

Rewrite in third person with concrete actions: e.g., 'Creates Telegram Mini Apps using the WebApp API, integrates TON blockchain wallets, implements in-app payments, and builds bot interactions.'

Add an explicit 'Use when...' clause: e.g., 'Use when the user mentions Telegram bots, Mini Apps, TMA, TON blockchain, or building apps for Telegram.'

Remove marketing fluff ('800M+ users', 'exploding') and replace with specific technical capabilities and trigger terms like 'TWA', 'Telegram WebApp', '@BotFather', 'tg:// deep links'.

DimensionReasoningScore

Specificity

Names the domain (Telegram Mini Apps, TON blockchain) but actions are vague and generic - 'build apps', 'monetize with crypto', 'design for the Telegram UX paradigm' are not concrete, actionable capabilities like 'create bot commands' or 'integrate TON wallet payments'.

2 / 5

Completeness

Has a vague 'what' (build Telegram Mini Apps, design for Telegram UX) but completely lacks a 'when' clause. There is no explicit trigger guidance for when Claude should select this skill. Per rubric guidelines, missing 'Use when...' caps completeness at 3, and the 'what' is also weak, so this scores a 2.

2 / 5

Trigger Term Quality

Includes some relevant keywords like 'Telegram', 'Mini App', 'TON blockchain', 'DeFi', 'crypto', but misses natural user phrases like 'Telegram bot', 'TMA', 'tg app', 'TWA', 'WebApp API', or specific file/framework terms users might mention.

3 / 5

Distinctiveness Conflict Risk

The Telegram Mini App / TON blockchain niche is somewhat specific, but the broad mentions of 'games, DeFi, utilities, social apps' and generic 'build apps' language could overlap with general web development, blockchain, or game development skills.

3 / 5

Total

10

/

20

Passed

Validation

90%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation10 / 11 Passed

Validation for skill structure

CriteriaDescriptionResult

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

10

/

11

Passed

Repository
administrakt0r/AI-Agents-Safe-Coding-Skills
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.