CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

l-update-deps

Update a single dependency by reading its full changelog and assessing impact. Safe updates are applied directly, major updates are flagged for design review. Use when updating packages.

Quality

78%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Low

Low-risk findings worth noting

Fix and improve this skill with Tessl

tessl review fix ./.claude/skills/l-update-deps/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

81%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A strong, highly actionable skill body: concrete commands at every step, a clear decision framework for dev/production/semver/deprecated cases, and explicit validation with a test-pass/fail feedback loop. Weaknesses are minor — an empty placeholder code block in step 4, a non-runnable jq regex example, and slight length that could benefit from splitting reference material out.

Suggestions

Replace the empty bash block in step 4 with the actual Grep invocation (e.g. a Grep tool call pattern for the package name) so the impact-assessment step is executable.

Make the changelog-release jq filter concrete with a real example regex instead of the 'v?{from}|v?{to}|...' placeholder.

Trim emphasis-only sentences ('This is the most important step', 'Do not skim') and consider moving the illustrative dependency-list example to a short reference file.

DimensionReasoningScore

Conciseness

The body is mostly lean — concrete commands with minimal concept explanation — but has minor over-explanation that could be trimmed: 'This is the most important step', 'Do not skim', and the long illustrative dependency list. Not a 5 because those few sentences and the example block spend tokens on emphasis rather than instruction.

4 / 5

Actionability

Mostly executable guidance with real commands (pnpm outdated, gh api releases, npm info, pnpm update, filtered tests), but minor gaps remain: step 4 has an effectively empty bash block ('# Find all imports/requires') with a vague 'Use Grep' instruction, and the jq filter 'test("v?{from}|v?{to}|...")' is a placeholder rather than copy-paste ready. Not a 3 because the vast majority of commands are complete and runnable.

4 / 5

Workflow Clarity

A clear six-step sequence with explicit validation checkpoints and feedback loops: 'If already up to date, say so and stop', ordered fallback sources for the changelog, and 'If tests pass, the update is good. If tests fail, investigate and fix.' Classification rules (dev vs production, semver, deprecated) gate each path before action.

5 / 5

Progressive Disclosure

Well-organized single-file structure with clear numbered sections covering one coherent task, and a reference to /l-commit for committing. Not a 5 because at ~180 lines the example output format and changelog-source recipes could live in a one-level-deep reference file to keep SKILL.md as a tighter overview.

4 / 5

Total

17

/

20

Passed

Description

67%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A solid description with a concrete, specific 'what' and an explicit 'when' clause in third-person voice. The main weakness is thin trigger-term coverage — only the generic phrase 'updating packages' — which limits discoverability against natural user phrasings like 'upgrade' or 'bump this dependency'.

Suggestions

Broaden the 'Use when' clause with natural synonyms, e.g. 'Use when updating packages, upgrading dependencies, or bumping versions' to improve trigger matching.

Mention the listing behavior (e.g. 'or list all outdated packages when none is specified') so the no-argument flow is discoverable from the description.

Include the testing/verification step briefly ('then run affected packages' tests') to make the capability coverage complete.

DimensionReasoningScore

Specificity

The description lists several concrete actions — 'reading its full changelog', 'assessing impact', 'Safe updates are applied directly', 'major updates are flagged for design review'. It falls short of a 5 because coverage has gaps (listing outdated packages, running tests, committing) and below 4 because it goes well beyond naming the domain with 1-2 actions.

4 / 5

Completeness

Both parts are present: a clear 'what' (update a single dependency via changelog reading and impact assessment, with safe/major handling) and an explicit 'when' ('Use when updating packages'). Not a 5 because the 'when' clause is generic — it lacks concrete trigger phrasing like 'use when the user asks to update, upgrade, or bump a dependency'.

4 / 5

Trigger Term Quality

The only trigger phrase is 'Use when updating packages', which covers the core case but misses natural variations users would say, such as 'upgrade', 'bump version', 'outdated', or naming package managers. Not a 4 because the keyword set is a single generic phrase rather than good coverage with a few missing terms.

3 / 5

Distinctiveness Conflict Risk

The changelog-reading and safe/major-review framing carves out a clear niche that is unlikely to misfire on unrelated skills. Not a 5 because 'updating packages' is fairly broad and could overlap with install/general package-management skills.

4 / 5

Total

15

/

20

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

15

/

16

Passed

Repository

lowdefy/lowdefy

Path

.claude/skills/l-update-deps/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.