CtrlK
BlogDocsLog inGet started
Tessl Logo

api-and-namespace-design

API design conventions, namespace coordinate system, RBAC roles, ClawHub compatibility layer, OpenAPI contract sync rules, and CSRF/session handling.

55

Quality

61%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./.agents/skills/api-and-namespace-design/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

75%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The content is a well-structured, lean reference of project-specific conventions with concrete commands and an explicit drift-validation step. Its main limitation is the absence of any bundle/reference files and a fully spelled-out fix-and-retry loop for contract drift.

DimensionReasoningScore

Conciseness

The body is tight and project-specific — bullet lists, tables, and concrete paths/commands with no padding or explanation of concepts Claude already knows (e.g. it never explains what CSRF or OpenAPI is), with only minor spots that could be trimmed further, keeping it just below a 5.

4 / 5

Actionability

It gives copy-paste-ready commands (`make generate-api`, the full `openapi-typescript ...` invocation, `./scripts/check-openapi-generated.sh`), concrete package paths, and an explicit endpoint table, with only minor gaps in coverage of less common cases.

4 / 5

Workflow Clarity

The OpenAPI sync flow is sequenced (generate -> commit -> verify) with an explicit validation checkpoint (`check-openapi-generated.sh` fails if the SDK is stale); it stops short of a 5 because no explicit fix-and-retry recovery loop is documented.

4 / 5

Progressive Disclosure

The body is well-organized into clearly headed sections with content appropriately inlined for a conventions/reference skill; there are no bundle files and no signaled one-level-deep references, so it sits at 4 rather than 5.

4 / 5

Total

16

/

20

Passed

Description

48%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description comprehensively names its subject domains but reads as a topic list rather than action-oriented guidance, and it omits any explicit 'when to use' trigger. Distinctiveness is strong thanks to project-specific terminology.

Suggestions

Rewrite as concrete actions with verbs, e.g. 'Design REST API endpoints, apply namespace/RBAC conventions, sync OpenAPI contracts, and handle CSRF/session flows'.

Add an explicit 'Use when...' trigger clause, e.g. 'Use when adding or modifying SkillHub REST endpoints, namespace/RBAC logic, or the ClawHub compatibility layer'.

Include a couple of natural user phrasings (e.g. 'adding an API endpoint', 'regenerating OpenAPI types') to improve trigger-term quality.

DimensionReasoningScore

Specificity

The description names six subject areas ('API design conventions, namespace coordinate system, RBAC roles, ClawHub compatibility layer, OpenAPI contract sync rules, and CSRF/session handling') but lists domains rather than concrete actions, matching the score-2 anchor of naming the domain with minimal/generic actions.

2 / 5

Completeness

It clearly states 'what' the skill covers but has no 'Use when...' or equivalent trigger clause, so per the missing-trigger guideline completeness is capped at 3.

3 / 5

Trigger Term Quality

Relevant developer-facing terms ('API design', 'RBAC', 'OpenAPI', 'CSRF/session') are present but heavily project-specific and jargon-laden ('namespace coordinate system', 'ClawHub compatibility layer'), missing common variations a user might naturally phrase.

3 / 5

Distinctiveness Conflict Risk

Project-specific terms (ClawHub, namespace coordinate system, SkillHub RBAC) give it a clear niche with minimal conflict risk, though 'API design' and 'OpenAPI' could mildly overlap with generic API skills.

4 / 5

Total

12

/

20

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository
iflytek/skillhub
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.