CtrlK
BlogDocsLog inGet started
Tessl Logo

fireflies-security-basics

Apply Fireflies.ai security best practices for API keys and webhook verification. Use when securing API keys, verifying webhook signatures, or auditing Fireflies.ai security configuration. Trigger with phrases like "fireflies security", "fireflies secrets", "secure fireflies", "fireflies webhook signature", "fireflies HMAC".

66

Quality

81%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Low

Low-risk findings worth noting

SKILL.md
Quality
Evals
Security

Quality

Content

62%Weight 40%Scale 1-3

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body is highly actionable and clearly sequenced with good validation checkpoints, but it is mildly verbose (redundant summary sections, dual-language code) and one code example has a missing import. Progressive disclosure is limited by the monolithic single-file structure.

Suggestions

Add `import os` to the Python webhook example (it references os.environ) so the snippet is copy-paste runnable.

Remove or merge the redundant Output section, which restates the Overview and Security Checklist, to tighten token efficiency.

Consider moving the full TypeScript and Python webhook verification code into a references/ file and keeping only a concise quick-start snippet inline to improve progressive disclosure.

DimensionReasoningScore

Conciseness

The body is largely lean and code-driven, but the Output section restates the Overview and the dual TypeScript+Python webhook blocks plus overlapping Checklist/Error-Handling sections add tokens that could be tightened.

2 / 3

Actionability

Most code blocks are executable and copy-paste ready, but the Python webhook example uses os.environ without importing os, so it is not fully runnable as written.

2 / 3

Workflow Clarity

Steps 1-6 are clearly sequenced with explicit validation checkpoints (pre-commit leak hook, 401 signature rejection, key-rotation test/verify) plus a Security Checklist and Error-Handling recovery guidance.

3 / 3

Progressive Disclosure

Sections are well organized, but at ~190 lines all content is inline with no bundle files; full dual-language code and reference material that could be split out remain in the single SKILL.md.

2 / 3

Total

9

/

12

Passed

Description

100%Weight 40%Scale 1-3

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong, well-structured description that names concrete actions, provides explicit trigger guidance, and is tightly scoped to a distinct niche. Voice is appropriately third-person/imperative with no over-claims.

DimensionReasoningScore

Specificity

The description enumerates multiple concrete actions — 'securing API keys', 'verifying webhook signatures', and 'auditing Fireflies.ai security configuration' — rather than vague abstractions.

3 / 3

Completeness

It clearly states both what ('Apply Fireflies.ai security best practices for API keys and webhook verification') and when ('Use when securing API keys, verifying webhook signatures, or auditing...'), with an explicit Use-when clause.

3 / 3

Trigger Term Quality

Explicit trigger phrases like 'fireflies security', 'fireflies secrets', 'secure fireflies', and 'fireflies webhook signature' give good coverage of natural terms a user would say.

3 / 3

Distinctiveness Conflict Risk

The Fireflies.ai-specific niche and fireflies-prefixed trigger phrases make it clearly distinguishable and unlikely to fire for unrelated skills.

3 / 3

Total

12

/

12

Passed

Validation

87%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation14 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

allowed_tools_field

'allowed-tools' contains unusual tool name(s)

Warning

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

14

/

16

Passed

Repository
jeremylongshore/claude-code-plugins-plus-skills
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.