CtrlK
BlogDocsLog inGet started
Tessl Logo

credentials

Centralized API key management from Access.txt

60

Quality

70%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Risky

Do not use without reviewing

Fix and improve this skill with Tessl

tessl review fix ./skills/credentials/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

72%

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The skill is highly actionable with executable code and validation commands and is well-organized into navigable sections. Its main weaknesses are verbosity from duplicated parsing logic and a workflow that shows validation as sample output rather than an explicit feedback checkpoint.

Suggestions

Consolidate the Python and TypeScript parsing blocks (or move one to a bundle file) to reduce duplication and token cost.

Make Step 3 an explicit validation feedback loop (run curl checks -> if non-200, report and retry) instead of only showing expected output.

Dedupe the env-var listing that appears in both the Quick Reference and the identification table.

DimensionReasoningScore

Conciseness

The body is mostly efficient tables and code, but it is long and repeats material (e.g., the parsing logic appears twice in Python and TypeScript, and env-var names are listed in multiple sections), so it could be tightened.

2 / 3

Actionability

It provides fully executable Python and TypeScript parsing code, concrete curl validation commands, and copy-paste-ready bash for .env creation and .gitignore updates.

3 / 3

Workflow Clarity

The Project Setup Workflow lists five sequenced steps, but validation is shown only as illustrative output rather than an explicit validate-then-fix feedback loop, and the cap for missing validation in batch/destructive operations applies.

2 / 3

Progressive Disclosure

There are no bundle files, and the body is organized into clearly labeled sections (Discovery, Formats, Patterns, Validation, Workflow, Security) that serve as a self-contained overview; for a sub-50-line-equivalent single-purpose skill this is appropriate.

3 / 3

Total

10

/

12

Passed

Description

67%

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description identifies a concrete domain and source file and pairs it with an explicit when-to-use trigger, satisfying completeness. It is slightly thin on enumerated actions and natural trigger variations, and could overlap with broader credentials skills.

Suggestions

Enumerate a couple of concrete actions (e.g., 'load, validate, and inject API keys into a project .env from a centralized Access.txt') to lift specificity.

Add natural trigger variations users would say, such as 'secrets', 'credentials', or '.env setup'.

Sharpen distinctiveness by naming the centralized-file approach in the description itself, reducing overlap with generic secret-management skills.

DimensionReasoningScore

Specificity

Names the domain (API key management) and a concrete source (Access.txt), but describes only a single action rather than listing multiple specific concrete actions like the score-3 anchor requires.

2 / 3

Completeness

The description states what it does ('Centralized API key management from Access.txt') and the when-to-use frontmatter explicitly gives the trigger ('When setting up a new project that needs API keys or environment variables').

3 / 3

Trigger Term Quality

Includes relevant terms users would say ('API keys', 'environment variables', 'project'), but lacks common variations like 'secrets', 'credentials', or '.env' that natural requests would include.

2 / 3

Distinctiveness Conflict Risk

The Access.txt framing is reasonably niche, but 'API key management' could still overlap with other secret/env-setup skills, so it is only somewhat distinct rather than clearly non-conflicting.

2 / 3

Total

9

/

12

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

15

/

16

Passed

Repository
alinaqi/claude-bootstrap
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.