CtrlK
BlogDocsLog inGet started
Tessl Logo

building-api-gateway

Create API gateways with routing, load balancing, rate limiting, and authentication. Use when routing and managing multiple API services. Trigger with phrases like "build API gateway", "create API router", or "setup API gateway".

64

Quality

78%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./plugins/api-development/api-gateway-builder/skills/building-api-gateway/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

57%Weight 40%Scale 1-3

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body is well-structured with a clear overview, prerequisites, sequenced instructions, an error table, and examples, plus three real one-level-deep reference files. Its main weaknesses are prose-heavy instruction steps, executable code living only in references rather than the body, and validation deferred to the end rather than interleaved.

Suggestions

Tighten instruction steps by trimming justifying clauses (e.g. 'to protect all downstream services uniformly', 'with degraded state support for non-critical service failures') so each step states only the action.

Add an interleaved validation checkpoint — e.g. verify routing/auth/rate-limit behavior after implementing each middleware rather than only in the final test step — to give the workflow an explicit feedback loop.

Include at least one small executable snippet (a routes.yaml excerpt or a gateway bootstrap command) directly in the body so core guidance is actionable without opening references.

DimensionReasoningScore

Conciseness

The body is mostly efficient (single-paragraph overview, concrete prerequisites, no padding about what an API gateway is), but several instruction steps carry justifying prose — e.g. step 4 'to protect all downstream services uniformly' and step 8 'with degraded state support for non-critical service failures' — that could be tightened.

2 / 3

Actionability

Guidance names concrete patterns (headers like X-User-ID, status codes 502/503/504, /users/* -> user-service, exact output file paths), but the body contains no executable code or commands — that detail is offloaded to examples.md — so it stops short of copy-paste-ready, level-3 instruction.

2 / 3

Workflow Clarity

Nine well-sequenced steps cover the build end-to-end, but validation is deferred to a single final test step (step 9) with no interleaved checkpoints or feedback loops mid-process, fitting the level-2 anchor of 'sequence present but checkpoints missing or implicit'.

2 / 3

Progressive Disclosure

The body is an overview that clearly signals three one-level-deep references (implementation.md, errors.md, examples.md), all of which exist as real bundle files with content appropriately split into implementation guide, error patterns, and examples — matching the level-3 anchor.

3 / 3

Total

9

/

12

Passed

Description

100%Weight 40%Scale 1-3

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description is concise, specific, and complete: it names four concrete capabilities, states when to use the skill, and supplies explicit trigger phrases. It avoids fluff and over-claims while remaining clearly distinguishable from sibling skills.

DimensionReasoningScore

Specificity

Lists multiple concrete capabilities — 'routing, load balancing, rate limiting, and authentication' under 'Create API gateways' — matching the level-3 anchor of enumerating specific actions rather than vague language.

3 / 3

Completeness

Explicitly answers both 'what' (create API gateways with routing/load balancing/rate limiting/authentication) and 'when' ('Use when routing and managing multiple API services'), with explicit triggers — the level-3 anchor.

3 / 3

Trigger Term Quality

Provides explicit natural trigger phrases ('build API gateway', 'create API router', 'setup API gateway') alongside a 'Use when' clause, giving good coverage of terms a user would actually say.

3 / 3

Distinctiveness Conflict Risk

'API gateway' is a clear, distinct niche and the routing/managing-multiple-services trigger context makes it unlikely to fire for unrelated skills.

3 / 3

Total

12

/

12

Passed

Validation

87%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation14 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

allowed_tools_field

'allowed-tools' contains unusual tool name(s)

Warning

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

14

/

16

Passed

Repository
jeremylongshore/claude-code-plugins-plus-skills
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.