CtrlK
BlogDocsLog inGet started
Tessl Logo

secops-setup-antigravity

Helps the user configure the Google SecOps Remote MCP Server for Antigravity. Use this when the user asks to "set up" or "configure" the security tools for Antigravity.

74

1.53x
Quality

61%

Does it follow best practices?

Impact

100%

1.53x

Average score across 3 eval scenarios

SecuritybySnyk

Risky

Do not use without reviewing

Optimize this skill with Tessl

npx tessl skill review --optimize ./extensions/google-secops/skills/setup-antigravity/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Discovery

64%

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description has good completeness with explicit 'Use when' triggers and is distinctive enough to avoid conflicts with other skills. However, it lacks specificity about what configuration actions are actually performed and could benefit from additional trigger term variations that users might naturally use.

Suggestions

Add specific concrete actions the skill performs, e.g., 'Sets up API credentials, configures connection endpoints, and validates authentication for the Google SecOps Remote MCP Server'

Expand trigger terms to include variations like 'install', 'connect', 'MCP setup', 'SIEM integration', or 'security integration'

DimensionReasoningScore

Specificity

The description uses vague language like 'configure' without specifying concrete actions. It doesn't explain what configuration entails (e.g., setting API keys, defining endpoints, configuring authentication).

1 / 3

Completeness

The description answers both what ('configure the Google SecOps Remote MCP Server for Antigravity') and when ('when the user asks to set up or configure the security tools for Antigravity') with explicit trigger guidance.

3 / 3

Trigger Term Quality

Includes some useful trigger terms ('set up', 'configure', 'security tools', 'Antigravity', 'Google SecOps') but misses common variations like 'install', 'connect', 'MCP', 'remote server', or 'SIEM'.

2 / 3

Distinctiveness Conflict Risk

The description is highly specific to a particular product combination (Google SecOps + Antigravity + MCP Server), making it unlikely to conflict with other skills.

3 / 3

Total

9

/

12

Passed

Implementation

57%

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

This skill provides a reasonable structure for configuring Google SecOps but falls short on actionability by describing operations (read template, merge JSON) without providing executable code. The workflow is clear but lacks validation steps to catch common failures like invalid tokens or malformed JSON merges.

Suggestions

Add executable code snippets for reading the template file and performing the JSON merge operation, rather than just describing the steps

Include a validation checkpoint after the merge step (e.g., 'Verify the JSON is valid: `cat ~/.gemini/antigravity/mcp_config.json | jq .`')

Remove the 'You are an expert...' framing line as it adds no actionable value

Add error handling guidance for common failures (e.g., expired token, missing template file, invalid JSON after merge)

DimensionReasoningScore

Conciseness

Mostly efficient but includes some unnecessary framing ('You are an expert...') and could tighten the prerequisite section. The step-by-step guidance is reasonably lean.

2 / 3

Actionability

Provides concrete bash commands for gcloud auth, but key steps like reading templates, merging JSON, and token generation are described rather than shown with executable code. Missing actual code for the merge operation.

2 / 3

Workflow Clarity

Steps are listed in sequence with clear phases (prerequisites, configuration, verification), but lacks explicit validation checkpoints. No error handling or feedback loop if the merge fails or token generation doesn't work.

2 / 3

Progressive Disclosure

Well-organized with clear sections. References external files (template, .env.example) appropriately at one level deep. Content is appropriately scoped for a setup guide.

3 / 3

Total

9

/

12

Passed

Validation

90%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation10 / 11 Passed

Validation for skill structure

CriteriaDescriptionResult

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

10

/

11

Passed

Repository
google/mcp-security
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.