CtrlK
BlogDocsLog inGet started
Tessl Logo

authenticating-with-oauth

Generates access tokens, handles token refresh, and manages bearer authentication for external APIs in BC. Use when implementing OAuth Client Credentials flow, Authorization Code flow, or API authentication with token caching.

68

Quality

81%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Passed

No findings from the security scan

SKILL.md
Quality
Evals
Security

Quality

Content

71%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A well-structured, actionable skill with executable code and clear validation checkpoints. Its main weakness is progressive disclosure: three of the four referenced files are missing from the bundle.

Suggestions

Add the missing referenced files (token-management.md, azure-setup.md, troubleshooting.md) to references/ or remove the dangling links from the body.

Implement the empty GetCachedToken() procedure or note explicitly how token caching is expected to be completed, since Step 4 references it.

Tighten the prose in "Security Essentials" and "Validation Gates" into terse bullets to reclaim tokens without losing the checkpoints.

DimensionReasoningScore

Conciseness

Code-first and largely lean with minimal preamble; the "Security Essentials" and prose notes add small amounts of over-explanation that could be trimmed, but nothing is severely padded.

4 / 5

Actionability

Five full executable AL code blocks cover the common cases copy-paste ready, with placeholders clearly marked; the empty GetCachedToken() stub is a minor gap leaving one routine unimplemented.

4 / 5

Workflow Clarity

A clear five-step procedure plus an explicit Validation Gates section and a feedback-loop note; checkpoints are strong, though the retry and caching paths rely on a few implicit details.

4 / 5

Progressive Disclosure

Structure and section headers are good and references are clearly signaled, but the body names four reference files while only oauth-patterns.md exists in references/ — three broken links degrade real navigation.

3 / 5

Total

15

/

20

Passed

Description

92%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong, concrete description with explicit what-and-when structure and distinct OAuth triggers. Slightly jargon-heavy on trigger terms, which keeps it just short of perfect trigger coverage.

DimensionReasoningScore

Specificity

Names three concrete actions ("Generates access tokens", "handles token refresh", "manages bearer authentication") giving comprehensive coverage of the skill's capabilities.

5 / 5

Completeness

Clearly states what it does and follows with an explicit "Use when implementing OAuth Client Credentials flow, Authorization Code flow, or API authentication with token caching." trigger clause.

5 / 5

Trigger Term Quality

Strong natural domain terms ("OAuth Client Credentials flow", "Authorization Code flow", "token caching", "bearer authentication") but leans on flow-specific jargon and omits plainer synonyms a user might say.

4 / 5

Distinctiveness Conflict Risk

Narrow OAuth-for-BC niche with distinct trigger phrases makes it unlikely to fire for unrelated skills.

5 / 5

Total

19

/

20

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository
emgreppi/Business-Central-AI-Skill
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.