CtrlK
BlogDocsLog inGet started
Tessl Logo

use-native-credential-proxy

Replace OneCLI gateway with the built-in credential proxy. For users who want simple .env-based credential management without installing OneCLI. Reads API key or OAuth token from .env and injects into container API requests.

66

Quality

79%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./.claude/skills/use-native-credential-proxy/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

96%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The content is highly actionable and concise with a well-sequenced workflow that includes explicit validation and feedback loops for a destructive merge operation; the only minor gap is that the single-file structure, while clear, is a touch long to warrant the top progressive-disclosure score.

Suggestions

Consider moving the Troubleshooting and Removal sections into a referenced file (e.g., TROUBLESHOOTING.md) to keep SKILL.md as a tighter overview and reach a one-level-deep progressive-disclosure structure.

In Phase 3, surface the security note about not collecting tokens in chat earlier and more prominently so the sensitive-handling guidance is not buried under a sub-path.

Add an explicit rollback checkpoint in Phase 2 before running npm install/build so a failed merge can be cleanly aborted before dependency changes.

DimensionReasoningScore

Conciseness

The body is lean and command-driven, assumes Claude's knowledge of git/npm/vitest, and avoids explaining known concepts; every section earns its place with no padding.

5 / 5

Actionability

Provides fully executable, copy-paste-ready bash commands with real file paths, exact grep/merge/vitest invocations, and concrete .env echo lines using real variable names covering the common cases.

5 / 5

Workflow Clarity

A clear four-phase sequence (Pre-flight, Apply, Setup, Verify) with explicit validation checkpoints ("All tests must pass and build must be clean before proceeding", log verification, merge-conflict feedback loop) for a destructive multi-file merge.

5 / 5

Progressive Disclosure

Well-organized with clear section headers and a single self-contained file that needs no external references, but at ~160 lines it is slightly long for one file and lacks the one-level-deep reference structure of the 5 anchor.

4 / 5

Total

19

/

20

Passed

Description

62%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description is specific and distinctive, naming concrete actions and a clear niche, but it lacks an explicit 'Use when...' trigger clause and natural user-facing keywords, which cap its completeness and trigger-term quality at mid-level scores.

Suggestions

Add an explicit 'Use when...' trigger clause (e.g., 'Use when migrating NanoClaw credentials from OneCLI to the built-in proxy') so the 'when' is concrete rather than implied by the 'For users who want' framing.

Include natural user-spoken trigger phrases and synonyms (e.g., 'credential management', 'API keys', '.env credentials') alongside the technical terms to improve trigger-term quality.

Optionally name the NanoClaw product explicitly in the description to reinforce distinctiveness and reduce any overlap with other credential-handling skills.

DimensionReasoningScore

Specificity

Names the domain and several concrete actions ("Replace OneCLI gateway", "Reads API key or OAuth token from .env and injects into container API requests"), with only minor coverage gaps, fitting between the 3 and 5 anchors.

4 / 5

Completeness

A clear 'what' is present but the 'when' is only weakly implied via the 'For users who want...' clause rather than an explicit 'Use when...' trigger, and the rubric caps completeness at 3 for a missing explicit trigger clause.

3 / 5

Trigger Term Quality

Has relevant technical keywords (OneCLI, credential proxy, .env, OAuth token, container API requests) but lacks natural user-spoken trigger phrases and synonyms, matching the 'some relevant keywords but missing common variations' anchor.

3 / 5

Distinctiveness Conflict Risk

Describes a precise migration between two named systems (OneCLI gateway to the built-in credential proxy) with a clear niche and minimal conflict risk, matching the highest anchor.

5 / 5

Total

15

/

20

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository
jbaruch/nanoclaw-telegram
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.