CtrlK
BlogDocsLog inGet started
Tessl Logo

evernote-enterprise-rbac

Implement enterprise RBAC for Evernote integrations. Use when building multi-tenant systems, implementing role-based access, or handling business accounts. Trigger with phrases like "evernote enterprise", "evernote rbac", "evernote business", "evernote permissions".

61

Quality

73%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./plugins/saas-packs/evernote-pack/skills/evernote-enterprise-rbac/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

57%Weight 40%Scale 1-3

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A well-organized body with executable code and a clean one-level reference structure. It is held back by some prerequisite padding, a code-less middleware step, and missing validation checkpoints in an authorization workflow.

Suggestions

Add an executable Express middleware code example to Step 3 rather than only describing it.

Insert an explicit validation checkpoint (e.g., verify shared-notebook privilege before proceeding, re-check tenant token scoping) into the multi-step workflow to support error recovery.

Trim the Prerequisites section of items Claude already knows to improve token efficiency.

DimensionReasoningScore

Conciseness

The body is mostly efficient with concise code blocks, but the Prerequisites list ('Understanding of Evernote Business accounts', 'Multi-tenant application architecture') and the Overview restate context Claude already knows; not 3 because of this mild padding, not 1 because it avoids verbose concept explanation.

2 / 3

Actionability

Steps 1-2 provide executable JavaScript (RBACService, permission mapping), but Step 3 ('Create Express middleware that validates...') gives no code and Step 5 is abstract guidance, so guidance is concrete in places but incomplete — anchor 2.

2 / 3

Workflow Clarity

Five steps are clearly sequenced, but authorization/multi-tenant work is destructive and the workflow lacks explicit validation checkpoints or validate->fix->retry loops; per the rubric this caps the score at 2 rather than 3.

2 / 3

Progressive Disclosure

The body is a concise overview that signals a single one-level-deep reference ('see [Implementation Guide](references/implementation-guide.md)') which exists as a real file, with well-organized sections — anchor 3.

3 / 3

Total

9

/

12

Passed

Description

90%Weight 40%Scale 1-3

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong, well-structured description that clearly states purpose, use conditions, and natural trigger phrases in third person. The only soft spot is specificity, which names the domain but a single main action rather than a list of concrete capabilities.

DimensionReasoningScore

Specificity

It names the domain ('enterprise RBAC for Evernote integrations') and a single primary action ('Implement'), but does not enumerate multiple concrete actions the way anchor 3 does; not the level above because it lacks a list of specific operations.

2 / 3

Completeness

It states what ('Implement enterprise RBAC for Evernote integrations') and an explicit when ('Use when building multi-tenant systems, implementing role-based access, or handling business accounts') plus triggers, satisfying anchor 3.

3 / 3

Trigger Term Quality

Explicit natural phrases ('evernote enterprise', 'evernote rbac', 'evernote business', 'evernote permissions') give good coverage of terms a user would actually say, matching anchor 3.

3 / 3

Distinctiveness Conflict Risk

The Evernote-specific triggers carve out a clear niche unlikely to fire for unrelated skills, matching anchor 3.

3 / 3

Total

11

/

12

Passed

Validation

87%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation14 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

allowed_tools_field

'allowed-tools' contains unusual tool name(s)

Warning

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

14

/

16

Passed

Repository
jeremylongshore/claude-code-plugins-plus-skills
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.