CtrlK
BlogDocsLog inGet started
Tessl Logo

iii-http-middleware

Registers engine-level middleware functions that run before HTTP handlers. Use when adding authentication, request logging, rate limiting, or any pre-handler logic to HTTP endpoints.

64

Quality

75%

Does it follow best practices?

Impact

No eval scenarios have been run

SecuritybySnyk

Advisory

Suggest reviewing before use

Optimize this skill with Tessl

npx tessl skill review --optimize ./skills/iii-http-middleware/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Discovery

100%

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

This is a well-crafted skill description that clearly communicates both what the skill does and when to use it. It uses third-person voice, includes specific concrete actions, provides natural trigger terms developers would use, and occupies a clear niche distinct from related HTTP or routing skills.

DimensionReasoningScore

Specificity

Lists multiple specific concrete actions: 'registers engine-level middleware functions', 'authentication', 'request logging', 'rate limiting', 'pre-handler logic to HTTP endpoints'. These are concrete, actionable capabilities.

3 / 3

Completeness

Clearly answers both what ('Registers engine-level middleware functions that run before HTTP handlers') and when ('Use when adding authentication, request logging, rate limiting, or any pre-handler logic to HTTP endpoints') with an explicit 'Use when' clause.

3 / 3

Trigger Term Quality

Includes strong natural keywords users would say: 'middleware', 'authentication', 'request logging', 'rate limiting', 'pre-handler logic', 'HTTP endpoints', 'HTTP handlers'. These cover the common terms developers use when needing this functionality.

3 / 3

Distinctiveness Conflict Risk

Clearly scoped to engine-level middleware and pre-handler logic for HTTP endpoints. The specificity of 'engine-level middleware' and the enumerated use cases (authentication, logging, rate limiting) make it distinct and unlikely to conflict with general HTTP routing or handler skills.

3 / 3

Total

12

/

12

Passed

Implementation

50%

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

This skill provides a solid conceptual overview of HTTP middleware with clear architecture and pattern descriptions, but falls short on actionability by not including a complete inline executable example. The content has some redundancy in its boilerplate sections and repeated patterns. The workflow is described at a high level but lacks validation checkpoints and error handling guidance that would make it more robust for implementation.

Suggestions

Add a minimal but complete inline executable example showing a middleware function registration and trigger attachment, rather than relying solely on the external reference file.

Remove or consolidate the redundant 'When to Use' and 'Boundaries' sections, and trim meta-commentary phrases like 'Use the concepts below when they fit the task'.

Add validation/debugging guidance: how to verify middleware is correctly attached, common error scenarios, and what happens when middleware throws an exception.

Provide working links to related skills (iii-http-endpoints, RBAC) rather than just naming them.

DimensionReasoningScore

Conciseness

The content is mostly efficient but includes some redundant sections. The 'When to Use' and 'Boundaries' sections at the bottom are boilerplate that add little value. Phrases like 'Use the concepts below when they fit the task' and 'Use the adaptations below when they apply to the task' are unnecessary meta-commentary. The 'Common Patterns' section largely repeats what's already covered in 'Key Concepts'.

2 / 3

Actionability

The skill provides concrete code snippets in the Common Patterns section and a clear table of primitives, but lacks a complete, executable example inline. It relies on an external reference file (http-middleware.js) for the full working example, and the inline snippets are fragments rather than copy-paste ready code blocks. The patterns shown are useful but not assembled into a runnable implementation.

2 / 3

Workflow Clarity

The architecture diagram clearly shows the request flow through middleware to handler, and the execution order is explained. However, there are no explicit validation steps or error handling guidance — no mention of how to verify middleware is correctly attached, how to debug middleware chain issues, or what happens when middleware throws an error. For a multi-step middleware chain setup, these checkpoints would be valuable.

2 / 3

Progressive Disclosure

The skill references an external file (../references/http-middleware.js) for the full implementation, which is good progressive disclosure. However, no bundle files were provided, so we can't verify the reference exists. The skill also references other skills (iii-http-endpoints, RBAC) by name but without links. The inline content could benefit from a brief executable example before pointing to the reference file.

2 / 3

Total

8

/

12

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation11 / 11 Passed

Validation for skill structure

No warnings or errors.

Repository
iii-hq/iii
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.