CtrlK
BlogDocsLog inGet started
Tessl Logo

authentication-portal-api

caddy-security authentication portal JSON API and admin/server API guidance. Use when building, reviewing, or debugging programmatic login clients, Portal API calls, Accept: application/json behavior, sandbox challenge sequences, /beacon, /whoami JSON/probe/id_token responses, refresh token API behavior, enable admin api, /api/server metadata/realms/info endpoints, and API-oriented authentication troubleshooting.

80

Quality

100%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

High

Do not use without reviewing

SKILL.md
Quality
Evals
Security

Quality

Content

100%Weight 40%Scale 1-3

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A lean, highly actionable API reference that sequences the multi-step login challenge clearly with guards and pairs it with concrete endpoint/field details and a troubleshooting feedback section. References are one level deep and clearly signaled, and the writing assumes Claude's competence throughout.

DimensionReasoningScore

Conciseness

The body is dense with actionable API specifics (headers, fields, endpoints, params) and never explains concepts Claude already knows; every line earns its place despite covering a lot of ground.

3 / 3

Actionability

Provides concrete, directly implementable guidance — request headers ('Accept: application/json', 'format=json'), exact fields (sandbox_id, sandbox_secret, challenge_kind), and exact endpoints (GET /api/server/metadata, POST /api/server/realms, POST /api/server/info) plus a caddyfile snippet.

3 / 3

Workflow Clarity

The login challenge sequence is a clearly numbered 5-step process with an explicit guard ('Do not reuse an old sandbox_secret; use the latest value'), and the Troubleshooting section provides symptom-to-check error-recovery feedback loops.

3 / 3

Progressive Disclosure

Content is organized into clearly labeled sections with one-level-deep, clearly signaled references ('Read these files when details matter' pointing at specific source files); no nested references and appropriately split content.

3 / 3

Total

12

/

12

Passed

Description

100%Weight 40%Scale 1-3

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong, third-person description that concretely states capabilities and provides explicit 'Use when' triggers with natural portal-API terms. It cleanly answers both what the skill does and when to use it within a clearly distinct niche.

DimensionReasoningScore

Specificity

Lists many concrete actions and targets — 'building, reviewing, or debugging programmatic login clients, Portal API calls, Accept: application/json behavior, sandbox challenge sequences, /beacon, /whoami ... refresh token API behavior, ... /api/server metadata/realms/info endpoints' — matching the multiple-specific-actions anchor.

3 / 3

Completeness

Explicitly states both what ('caddy-security authentication portal JSON API and admin/server API guidance') and when ('Use when building, reviewing, or debugging ...'), with concrete triggers, satisfying the both-what-and-when anchor.

3 / 3

Trigger Term Quality

Covers exact natural terms a developer would say — 'Accept: application/json', '/beacon', '/whoami', 'refresh token API', 'enable admin api', '/api/server metadata/realms/info' — giving good coverage of phrases users actually invoke.

3 / 3

Distinctiveness Conflict Risk

Highly specific to the caddy-security authentication portal JSON/admin API niche with distinct triggers (sandbox challenge sequences, /beacon, /whoami), making it unlikely to fire for an unrelated skill.

3 / 3

Total

12

/

12

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository
greenpau/caddy-security
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.