CtrlK
BlogDocsLog inGet started
Tessl Logo

deepgram-enterprise-rbac

Configure enterprise role-based access control for Deepgram integrations. Use when implementing team permissions, managing API key scopes, or setting up organization-level access controls. Trigger: "deepgram RBAC", "deepgram permissions", "deepgram access control", "deepgram team roles", "deepgram enterprise", "deepgram key scopes".

67

Quality

82%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Passed

No findings from the security scan

SKILL.md
Quality
Evals
Security

Quality

Content

65%Weight 40%Scale 1-3

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The skill is highly actionable — complete, executable TypeScript for every step — but it is over-long for a SKILL.md, leaves its one reference file unlinked while duplicating it inline, and omits verification before destructive key revocation. Tightening the inline code, wiring up the reference, and adding a validate-before-revoke checkpoint would lift the weaker dimensions.

Suggestions

In Step 5 rotation, verify the newly created key works (or revoke only after an explicit grace period) before deleting the old key, and report failures per key — this closes the validation gap that caps workflow_clarity at 2.

Link references/implementation.md from the body (e.g. under Resources) and move the duplicated role/service/rotation code there, keeping SKILL.md as a concise overview so the reference is one level deep and clearly signaled.

Trim the dangling Resources bullets ("API Key Management", "Project Management") to real links or remove them, and cut inline comments that restate obvious code, to tighten token efficiency toward the score-3 anchor.

DimensionReasoningScore

Conciseness

The body is roughly 340 lines with six full inline TypeScript blocks, much of which overlaps references/implementation.md, plus dangling Resources bullets ("API Key Management", "Project Management") with no links; it is mostly concrete rather than fluffy, so above 1, but not the lean 'every token earns its place' level of 3.

2 / 3

Actionability

Each step ships complete, executable TypeScript (DeepgramKeyManager, requireRole/requireScope middleware, TeamManager, rotateExpiringKeys) with concrete route examples, matching the copy-paste-ready score-3 anchor.

3 / 3

Workflow Clarity

Steps 1–6 are clearly sequenced, but the batch/destructive key-rotation step revokes the old key without verifying the new one works (the comment even hedges 'after a grace period, or immediately'), so per the rubric's destructive/batch rule workflow clarity is capped at 2.

2 / 3

Progressive Disclosure

A bundle file references/implementation.md exists but is never signaled from the body, and the large inline code blocks duplicate content that belongs in that reference; structure exists but references are not clearly signaled and content that should be separate is inline.

2 / 3

Total

9

/

12

Passed

Description

100%Weight 40%Scale 1-3

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong, third-person description that concretely states the skill's purpose, gives an explicit 'Use when' clause, and lists natural trigger terms scoped to a distinct Deepgram-enterprise niche. Only minor cosmetic issues (stray line breaks inside the YAML string) keep it from being flawless.

DimensionReasoningScore

Specificity

"Configure enterprise role-based access control for Deepgram integrations" is paired with "implementing team permissions, managing API key scopes, or setting up organization-level access controls" — multiple specific concrete actions, matching the score-3 anchor rather than the single-domain score-2 anchor.

3 / 3

Completeness

It states both what ("Configure enterprise role-based access control for Deepgram integrations") and when ("Use when implementing team permissions…" plus the explicit Trigger list), satisfying the what-AND-when anchor; it is not the score-2 case where 'when' is only implied.

3 / 3

Trigger Term Quality

An explicit Trigger list gives six natural phrases ("deepgram RBAC", "deepgram permissions", "deepgram access control", "deepgram team roles", "deepgram enterprise", "deepgram key scopes") a user would actually say, giving good coverage beyond a single keyword.

3 / 3

Distinctiveness Conflict Risk

The niche is narrow (enterprise Deepgram RBAC) and every trigger is Deepgram-prefixed, making collision with unrelated skills unlikely; this is clearer than the score-2 'Works with document files' style overlap.

3 / 3

Total

12

/

12

Passed

Validation

87%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation14 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

allowed_tools_field

'allowed-tools' contains unusual tool name(s)

Warning

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

14

/

16

Passed

Repository
jeremylongshore/claude-code-plugins-plus-skills
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.