CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

plugin-builder

Use when hardening, converting, auditing, or pre-release checking a Codex plugin package by verifying manifest paths, bundled skills, hooks, MCP/app config, validation gates, and release blockers.

Quality

89%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

SKILL.md
Quality
Evals
Security

Quality

Content

81%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body is a tight, executable overview: a gated workflow with real validation feedback loops, concrete inspection commands, and well-signaled progressive disclosure into references/. The main weaknesses are duplicated validation-command and reference listings, placeholder-substitution gaps in commands, and several referenced Infrastructure paths that are unresolvable from the bundle alone.

Suggestions

State the validation command once (e.g., in the Validation section) and reference it from the workflow and output examples, and merge the 'Read when' bullets with the References list to remove the duplicated reference listings.

Resolve or inline the 'Infrastructure/references/...' and 'Infrastructure/scripts/...' paths — they are absent from the bundle, so the primary validation command and three guidance pointers are unresolvable from SKILL.md alone; bundle them under references/ or remove them.

Replace the '<plugin>' placeholder with one concrete example invocation (or define the substitution once at first use) so the inspection commands are copy-paste ready.

DimensionReasoningScore

Conciseness

The body is lean and directive with no padding or explanations of concepts Claude already knows, but the validation command ('bash Infrastructure/scripts/validation-and-linting/validate_skill_authoring_family.sh') appears three times — in the output example, the workflow commands, and the Validation section — and the 'Read when' bullets duplicate the References list. This matches 'minor instances of over-explanation that could be trimmed' rather than 'every token earns its place'.

4 / 5

Actionability

Provides concrete, runnable inspection commands (the jq manifest projection and find for bundled surfaces), an exact output schema, and before/after JSON fix examples. Falls short of fully copy-paste-ready because commands use unsubstituted '<plugin>' placeholders and the validation script path does not resolve within the skill bundle.

4 / 5

Workflow Clarity

The 5-step sequence runs the validation gate before any file changes ('Run the focused validation checkpoint before changing files'), patches the smallest surface, then reruns the gate and returns exact pass/fail/blocked evidence, reinforced by 'Fail fast: stop at first failed gate and report blocker text'. This is a complete validate -> fix -> revalidate feedback loop.

5 / 5

Progressive Disclosure

SKILL.md is a compact overview with well-signaled one-level-deep pointers ('Read when: ... references/workflow.md', verified present in the bundle), keeping the main file tight. However, four referenced paths under 'Infrastructure/references/' do not exist in the bundle, and the References section lists files never introduced in the body — minor organization gaps that keep it below the clean navigation of a 5.

4 / 5

Total

17

/

20

Passed

Description

92%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong description: it names a precise niche, lists comprehensive concrete verification targets, and opens with an explicit 'Use when' clause covering the natural trigger activities. The only weakness is keyword coverage that misses a few plainer user phrasings like 'plugin review' or 'marketplace'.

DimensionReasoningScore

Specificity

Enumerates concrete verification targets — 'manifest paths, bundled skills, hooks, MCP/app config, validation gates, and release blockers' — alongside explicit modes ('hardening, converting, auditing, or pre-release checking'), covering the full plugin-package surface. Not 4: there is no meaningful coverage gap in the actions listed.

5 / 5

Completeness

Explicitly answers both questions: what — verifying 'manifest paths, bundled skills, hooks, MCP/app config, validation gates, and release blockers' — and when — 'Use when hardening, converting, auditing, or pre-release checking a Codex plugin package' names concrete trigger activities. Not 4: the when-clause is explicit with concrete trigger phrases, not weakly implied.

5 / 5

Trigger Term Quality

'Codex plugin package', 'hardening', 'auditing', and 'pre-release checking' are phrasings a user would naturally say, but simpler variations ('plugin review', 'plugin.json', 'marketplace entry') are absent. This matches 'good keyword coverage; a few natural terms missing' rather than the comprehensive synonym coverage of a 5.

4 / 5

Distinctiveness Conflict Risk

Scoped tightly to 'a Codex plugin package' with plugin-specific artifacts (manifest paths, bundled hooks, MCP/app config), forming a clear niche with minimal overlap risk against generic code-review or install skills.

5 / 5

Total

19

/

20

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository

jscraik/Agent-Skills

Path

Plugins/plugin-factory/skills/code_quality_review/plugin-builder/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.