Content
82%Weight 40%Scale 1-5Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.
A strong, information-dense skill body: executable verification code, precise platform facts (delivery semantics, sparse member.deleted payloads, signature secret vs API token), and a well-signaled one-level reference structure. Weaknesses are minor: a promotional tail of related-skill links that costs tokens, and example directories referenced but absent from the bundle.
Suggestions
Trim the 'Recommended' and 'Related Skills' sections to 2-3 links each (or fold them into one line) — the ~20 lines of sibling-skill promotion dilute the core content and cost context tokens.
Either include the examples/ directories (express, nextjs, fastapi) in the bundle or reword the link to point at the GitHub repository URL, so the 'complete handlers with tests' pointer isn't a dead path.
Add a short numbered handler sequence in the Delivery Semantics section (parse header → verify HMAC → check dedup store → enqueue → return 2xx) so the workflow is fully self-contained instead of delegating sequence details to the external webhook-handler-patterns skill.
| Dimension | Reasoning | Score |
|---|---|---|
Conciseness | The core is lean and fact-dense, assumes competence ("re-serializing the JSON changes the bytes and breaks the signature", sparse member.deleted field list, retry budget), but ~25 lines of cross-promotion ("Recommended: webhook-handler-patterns" with four external links, seven "Related Skills", and an Attribution section) are tokens that don't serve the task. Not 5 because of that padding; not 3 because nothing explains concepts Claude already knows. | 4 / 5 |
Actionability | Fully executable guidance: a copy-paste Node.js verifyCommunitySignature function that parses the header without assuming field order and uses timingSafeEqual, the exact signed payload (`{timestamp}.{raw_body}`), a working `npx hookdeck-cli listen 3000 community --path /webhooks/community` command, env vars with dashboard navigation paths, and exact delivery rules (2xx within 15s, 5 retries over an hour, dedupe window of an hour). Covers the common cases completely. | 5 / 5 |
Workflow Clarity | The handler sequence is explicit and prioritized — "verify, enqueue, return 2xx fast — never do the work inline" — with the signature check acting as a built-in validation checkpoint, and dedup guidance includes a concrete time window. Not 5: idempotency/error-handling/retry specifics are delegated to a separate skill rather than summarized as a numbered in-skill sequence, so a reader of this file alone gets direction, not a full step-by-step loop. | 4 / 5 |
Progressive Disclosure | Good split: the core (verification, events, envelope, delivery semantics) is inline and the three referenced files (references/overview.md, setup.md, verification.md) exist in the bundle, are one level deep, and each has a descriptive one-line label. Not 5: the body links examples/express/, examples/nextjs/, and examples/fastapi/ for "complete handlers with tests", but no examples/ directory exists in the bundle, leaving dangling paths at the exact moment a user needs deeper material. | 4 / 5 |
Total | 17 / 20 Passed |