CtrlK
BlogDocsLog inGet started
Tessl Logo

806-regulations-eu-data-act

Use when reviewing, designing, or modifying Java enterprise systems that expose, exchange, store, process, export, or port data across users, businesses, connected products, cloud providers, APIs, event streams, AI data pipelines, data spaces, or SaaS platforms and need EU Data Act engineering controls. This should trigger for requests such as Review a Java platform for EU Data Act controls; Design data access and portability evidence; Add data-sharing request workflows, export formats, interoperability, metadata, audit logs, cloud-switching support, non-personal data safeguards, or trade-secret handoffs; Assess Data Act engineering readiness before production release. Part of Plinth Toolkit

53

Quality

59%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./skills/806-regulations-eu-data-act/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

31%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

This skill suffers severely from verbosity and repetition—the same enumerated lists of Data Act concerns appear in nearly every section, inflating the document without adding value. While the progressive disclosure structure is reasonable (deferring examples and details to reference files), the SKILL.md body itself lacks any concrete, executable Java code or specific engineering patterns, making it abstract rather than actionable. The workflow provides a reasonable sequence but needs validation checkpoints and concrete completion criteria.

Suggestions

Eliminate the massive repetition: the lists of data types, roles, and concerns (data holder, user, data recipient, trade-secret, cloud-switching, etc.) appear in nearly identical form across 5+ sections. Consolidate into a single authoritative list and reference it.

Add at least 2-3 concrete Java code examples inline (e.g., a sample data access request DTO, an audit log annotation pattern, an export endpoint skeleton) rather than deferring all actionability to reference files.

Add explicit validation checkpoints to the workflow, such as 'Before proceeding to Step 4, verify that all identified datasets have traceable inventory entries and all access paths have authorization evidence.'

Reduce the SKILL.md body to under 100 lines by moving the detailed Scope and Constraints enumerations into the reference files, keeping only a concise overview with clear pointers.

DimensionReasoningScore

Conciseness

Extremely verbose and repetitive. The same lists of concerns (data holder, user, data recipient, trade-secret, cloud-switching, etc.) are repeated nearly verbatim across Scope, EU Data Act Engineering Review, Constraints, Workflow steps, and the closing sections. Massive amounts of text explain concepts Claude already knows (what REST APIs, Kafka topics, Spring Boot are). The skill could be reduced to roughly 20-30% of its current length without losing any actionable information.

1 / 5

Actionability

The skill provides no concrete code examples, no executable commands, no specific Java patterns, no sample DTOs, no API contract snippets, and no audit log schemas. Despite being titled for 'Java Enterprise' engineering, all guidance is abstract and descriptive ('review Java code, API contracts, DTOs, serializers...'). The engineering examples are deferred entirely to a reference file that wasn't provided. The workflow steps are high-level process descriptions rather than executable guidance.

2 / 5

Workflow Clarity

The 5-step workflow is sequenced and logically ordered (read references → classify scope → review implementation → recommend controls → generate report). However, there are no validation checkpoints, no feedback loops for error recovery, and no explicit criteria for when to proceed or stop. Steps 2-4 are vague about what constitutes completion. The instruction to use a report template provides some structure but lacks verification steps.

3 / 5

Progressive Disclosure

The skill appropriately references external files for detailed content (chapters summary, engineering examples, report template) with clear paths and one-level-deep navigation. The structure separates overview from detailed references well. However, without bundle files to verify, and given that the main SKILL.md itself is bloated with repetitive content that should have been trimmed rather than split, it loses a point. The inline content is too long for an overview document.

4 / 5

Total

10

/

20

Passed

Description

87%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

This is a strong skill description that clearly defines its niche at the intersection of Java enterprise development and EU Data Act compliance. It provides explicit trigger guidance with concrete example requests and covers a comprehensive set of capabilities. The main weakness is that the description is somewhat dense and could be slightly more readable, and some trigger terms are highly specialized which may limit discoverability for users who don't already know the exact terminology.

DimensionReasoningScore

Specificity

The description lists several specific actions: reviewing Java platforms for EU Data Act controls, designing data access/portability evidence, adding data-sharing request workflows, export formats, interoperability, metadata, audit logs, cloud-switching support, non-personal data safeguards, and trade-secret handoffs. It's quite comprehensive but reads more like a feature list than clearly delineated concrete actions.

4 / 5

Completeness

Explicitly answers both 'what' (reviewing/designing/modifying Java enterprise systems for EU Data Act engineering controls) and 'when' with a clear 'Use when...' clause and concrete trigger phrases like 'Review a Java platform for EU Data Act controls' and 'Assess Data Act engineering readiness before production release'.

5 / 5

Trigger Term Quality

Includes many natural trigger terms like 'EU Data Act', 'data portability', 'data-sharing', 'export formats', 'audit logs', 'cloud-switching', 'interoperability', 'Java enterprise'. However, some terms are quite specialized and it could benefit from more common synonyms (e.g., 'GDPR-adjacent', 'data compliance', 'vendor lock-in').

4 / 5

Distinctiveness Conflict Risk

Highly distinctive niche combining Java enterprise systems with EU Data Act compliance. The specificity of the regulatory framework (EU Data Act) combined with the technology stack (Java) and the detailed list of controls makes it very unlikely to conflict with other skills.

5 / 5

Total

18

/

20

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation11 / 11 Passed

Validation for skill structure

No warnings or errors.

Repository
jabrena/plinth
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.