CtrlK
BlogDocsLog inGet started
Tessl Logo

instantly-enterprise-rbac

Configure Instantly.ai workspace access control, team management, and API key governance. Use when managing workspace members, setting up team permissions, or implementing API key governance for multi-user Instantly workspaces. Trigger with phrases like "instantly team", "instantly permissions", "instantly workspace members", "instantly access control", "instantly rbac".

62

Quality

75%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./plugins/saas-packs/instantly-pack/skills/instantly-enterprise-rbac/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

50%Weight 40%Scale 1-3

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body is well-structured and concrete, but every dimension lands at 2: code is verbose and partially redundant, examples depend on a non-bundled client, destructive operations lack validation checkpoints, and all content lives in one monolithic file with no progressive disclosure to bundle files.

Suggestions

Move the verbose code examples and the Key API Endpoints / Error Handling tables into a reference file (e.g. references/api-reference.md) and keep SKILL.md as a concise overview with one-level-deep links, improving both conciseness and progressive disclosure.

Bundle or inline the InstantlyClient/request helper so the code examples are executable and copy-paste ready, or replace the custom wrapper with plain fetch/curl calls against the documented endpoints.

Add explicit validation or confirmation checkpoints before destructive operations — e.g. list and confirm a member before removeMember, verify key usage before revokeApiKey, and require explicit confirmation before changeWorkspaceOwner.

DimensionReasoningScore

Conciseness

The body is mostly executable code rather than concept explanation, but it is padded with console.log statements in every function and the trailing Key API Endpoints / Error Handling tables largely duplicate what the code already shows, so not every token earns its place.

2 / 3

Actionability

Endpoints, HTTP methods, and request bodies are concrete and specific, but the examples depend on an InstantlyClient imported from './src/instantly/client' that is not bundled, so the code is not executable or copy-paste ready as written.

2 / 3

Workflow Clarity

Steps are labeled 1–5 and sequenced, but destructive operations (removeMember, revokeApiKey, changeWorkspaceOwner) proceed with no validation or verification checkpoints, which caps workflow clarity at 2 per the destructive-operations guideline.

2 / 3

Progressive Disclosure

The skill is well over 50 lines with everything inline — five code sections plus reference tables — and no bundle-file references to offload the API reference, so the >50-line simple-skill exception does not apply and content that should be separate remains inline.

2 / 3

Total

8

/

12

Passed

Description

100%Weight 40%Scale 1-3

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description is strong across all dimensions: it states concrete capabilities, includes explicit 'Use when' trigger guidance and natural keyword phrases, and occupies a distinct niche. Voice is imperative (consistent with the good examples) with no first/second-person penalty.

DimensionReasoningScore

Specificity

Lists three concrete capability areas — 'workspace access control, team management, and API key governance' — matching the anchor for multiple specific concrete actions, not just naming a domain.

3 / 3

Completeness

Explicitly answers both what ('Configure Instantly.ai workspace access control, team management, and API key governance') and when ('Use when managing workspace members, setting up team permissions, or implementing API key governance'), with explicit trigger guidance.

3 / 3

Trigger Term Quality

Provides natural trigger phrases users would say ('instantly team', 'instantly permissions', 'instantly workspace members', 'instantly access control', 'instantly rbac'), giving good coverage rather than jargon-only terms.

3 / 3

Distinctiveness Conflict Risk

Targets a narrow Instantly.ai RBAC niche with Instantly-specific trigger phrases, making it clearly distinguishable and unlikely to fire for unrelated skills.

3 / 3

Total

12

/

12

Passed

Validation

87%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation14 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

allowed_tools_field

'allowed-tools' contains unusual tool name(s)

Warning

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

14

/

16

Passed

Repository
jeremylongshore/claude-code-plugins-plus-skills
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.