CtrlK
BlogDocsLog inGet started
Tessl Logo

omni-auth

Manage API key authentication and session tokens. Start here to authenticate requests via Bearer token, obtain session cookies, and configure login requirements for the OmniRoute API.

60

Quality

70%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Low

Low-risk findings worth noting

Fix and improve this skill with Tessl

tessl review fix ./skills/omni-auth/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

61%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A well-structured, actionable reference with executable curl examples and clear external links, weakened by a duplicated overview, marketing-style differentiators, and the absence of an explicit auth workflow with validation checkpoints.

Suggestions

Remove the verbatim Overview duplication of the description, or replace it with a brief orientation that adds new information.

Trim or relocate the 'Differentiators vs OpenAI direct' marketing content so the body stays focused on the auth task.

Add a short numbered auth workflow with a validation checkpoint (e.g., after login, verify the session via GET /api/auth/status before proceeding).

DimensionReasoningScore

Conciseness

Mostly concrete but includes tightening opportunities: the Overview duplicates the description verbatim, and the 'Differentiators vs OpenAI direct' section is marketing-style padding not directly needed to perform the auth task.

3 / 5

Actionability

Provides concrete, copy-paste-ready curl commands for each endpoint with env-var setup and error codes; minor gaps remain (browser-redirect OIDC flows shown as curl, placeholders to fill).

4 / 5

Workflow Clarity

Endpoint docs imply a sequence (login → cookie → authenticated calls → CSRF-then-logout) but there is no explicit numbered workflow or validation checkpoint for the auth lifecycle.

3 / 5

Progressive Disclosure

Well-organized into clear sections with one-level-deep references (external capability/CLI skill URLs, OpenAPI spec pointer) signaled in tables; minor gaps since some inlined product content could live elsewhere.

4 / 5

Total

14

/

20

Passed

Description

78%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A focused, concrete description that names specific auth actions and scopes itself clearly to the OmniRoute API. The 'Start here to...' phrasing serves as trigger guidance but a more explicit 'Use when...' clause would sharpen the trigger.

Suggestions

Add an explicit 'Use when...' clause (e.g., 'Use when authenticating to the OmniRoute API, managing session cookies, or configuring login requirements') to make the trigger unambiguous.

Include common synonyms or shorthand (e.g., 'login', 'auth token', 'API key') to broaden natural trigger coverage.

DimensionReasoningScore

Specificity

Names the domain (API key auth, session tokens) and several concrete actions — 'authenticate requests via Bearer token, obtain session cookies, and configure login requirements' — with minor coverage gaps since scope is auth-only.

4 / 5

Completeness

Clearly states what the skill does and provides equivalent trigger guidance via 'Start here to authenticate requests...', though the 'when' could be framed more explicitly as a 'Use when...' clause.

4 / 5

Trigger Term Quality

Includes natural terms a user would say ('API key', 'authenticate', 'session cookies', 'login') with good coverage, though a few synonyms/variations are missing.

4 / 5

Distinctiveness Conflict Risk

Scoped specifically to 'the OmniRoute API' auth and login, giving it a clear niche with distinct triggers and minimal conflict risk with other skills.

5 / 5

Total

17

/

20

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository
diegosouzapw/OmniRoute
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.