CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

create-auth

Create, migrate, or validate Better Auth implementation work. Use when the user wants Better Auth added or changed in code, including OAuth, passkeys, 2FA, magic links, or org flows.

Quality

74%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./Skills/security-ops/create-auth/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

45%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body is a well-organized process contract with a clear sequenced workflow and explicit fail-fast validation, but it contains almost no Better-Auth-specific actionable content (no code, commands, or configuration examples), and its progressive-disclosure pointers reference files that do not exist in the bundle. Generic meta-process language occupies most of the token budget.

Suggestions

Add concrete executable guidance: a minimal Better Auth install/setup snippet (e.g., auth.ts config with a provider) and the specific validation command to run, instead of abstract directives like 'Run the narrowest real validator'.

Fix the Progressive Disclosure references to point at files that actually exist in the bundle (references/ contains only contract.yaml, evals.yaml, task-profile.json; the cited Infrastructure/... .md files and deferred-skill-context/ directory are absent).

Trim overlapping generic sections — Philosophy/Avoid/Anti-Patterns and Validation/Failure Mode restate the same constraints — and replace the freed tokens with Better-Auth-specific gotchas.

DimensionReasoningScore

Conciseness

The body is short and scannable with no tutorial-style padding, but generic process boilerplate ("Keep the workflow evidence-first and bounded to the requested scope", "Treat missing evidence as a blocker") restates default agent behavior, and Gotchas/Anti-Patterns and Validation/Failure Mode overlap. This fits "mostly efficient but includes some unnecessary explanation or could be tightened" rather than anchor 4's minor trimming.

3 / 5

Actionability

There is no concrete Better Auth guidance: no install command, no auth.ts config example, no specific validator command — only high-level directives like "Run the narrowest real validator or command path available" and "Inspect 2-3 focused surfaces". This matches anchor 2 (minimal concrete guidance, missing specific steps) rather than anchor 3, which expects at least some concrete or pseudocode-level detail.

2 / 5

Workflow Clarity

The five-step Workflow is clearly sequenced with explicit checkpoints: "Stop at the first failed gate or blocker", "Rerun the relevant validation after fixes before claiming completion", and a fail-fast Validation section forming a feedback loop. It falls short of anchor 5 because the steps and validation are abstract directives rather than concrete commands, matching anchor 4's "clear sequence with most checkpoints present".

4 / 5

Progressive Disclosure

The body cites "Infrastructure/references/software-literature-expert-lens-pack.md", ".../software-literature-skill-expertise-map.md", and "Infrastructure/references/deferred-skill-context/security-ops-create-auth/", but the actual bundle's references/ contains only contract.yaml, evals.yaml, and task-profile.json — none of the cited paths exist, so navigation to deferred content is broken. References are clearly signaled (above anchor 2's 'buried'), but pointing to nonexistent files fits anchor 2's minimal usable structure better than anchor 3's 'references present but not clearly signaled'.

2 / 5

Total

11

/

20

Passed

Description

92%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description is strong: it clearly states both what the skill does and when to use it, with concrete Better Auth feature terms as triggers. Its only weakness is missing a few natural synonyms like "authentication", "login", or "sign-in".

DimensionReasoningScore

Specificity

"Create, migrate, or validate Better Auth implementation work... including OAuth, passkeys, 2FA, magic links, or org flows" lists three concrete actions plus five concrete feature areas, matching the comprehensive-coverage anchor. It is at least as specific as the anchor-5 example and does not fall to anchor 4, which expects minor gaps in coverage.

5 / 5

Completeness

"Create, migrate, or validate Better Auth implementation work" answers what it does, and "Use when the user wants Better Auth added or changed in code, including..." explicitly answers when with concrete trigger phrases. This directly matches the anchor-5 example structure.

5 / 5

Trigger Term Quality

Natural trigger terms like "Better Auth", "OAuth", "passkeys", "2FA", "magic links", and "migrate" are present and would be said by users. It falls short of anchor 5 because common synonyms such as "authentication", "login", or "sign-in" are missing.

4 / 5

Distinctiveness Conflict Risk

"Better Auth" names a specific library niche, and triggers are bound to Better Auth work rather than generic auth requests, giving minimal conflict risk. Generic feature words (OAuth, 2FA) are subsumed under the Better Auth condition, so it does not drop to anchor 4.

5 / 5

Total

19

/

20

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

metadata_version

'metadata.version' is missing

Warning

Total

15

/

16

Passed

Repository

jscraik/Agent-Skills

Path

Skills/security-ops/create-auth/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.