CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

hasura-graphql-engine

Complete guide for Hasura GraphQL Engine including instant GraphQL APIs, permissions, authentication, event triggers, actions, and production deployment

Quality

63%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Low

Low-risk findings worth noting

Fix and improve this skill with Tessl

tessl review fix ./plugins/luxor-devops-suite/skills/hasura-graphql-engine/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

46%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body is rich in concrete, copy-paste-ready Hasura configuration and covers the major feature areas well, but it is a bloated monolith that inlines material (deployment, patterns, troubleshooting, conceptual explanations) that belongs in separate reference files, and its operational workflows omit validation checkpoints. It functions as a condensed reproduction of the Hasura docs rather than a lean, well-structured skill.

Suggestions

Split the body into one-level-deep reference files (e.g. references/permissions.md, references/auth.md, references/event-triggers.md, references/deployment.md, references/patterns.md, references/troubleshooting.md) and reduce SKILL.md to a concise overview with clearly signaled links.

Cut conceptual padding — the "Core Concepts" bullet lists, generic best-practice advice, and five full example-app schemas — keeping only Hasura-specific knowledge and configuration Claude cannot be assumed to know.

Add explicit validation checkpoints to operational workflows: verify migrations with `hasura migrate status` after `migrate apply`, reload metadata and check `/healthz` after deployment, and test permission rules with a non-admin role before promoting changes.

DimensionReasoningScore

Conciseness

A ~1670-line monolith with substantial padding Claude does not need: conceptual "Core Concepts" bullet lists ("Zero Code: No resolver writing...", "Real-time by Default: Every query automatically has a subscription counterpart"), generic best-practice advice ("Create appropriate indexes", "Document custom actions"), five complete example applications, and a links section — much of which restates Hasura's documented behavior. Not 1 because a large share is concrete configuration and commands rather than pure concept explanation; not 3 because the padding is extensive and time-sensitive details ("hasura/graphql-engine:v2.36.0", "Last Updated: January 2025") are not isolated in a deprecated/old-patterns section.

2 / 5

Actionability

Provides extensive concrete, mostly executable guidance: a full docker-compose.yml, Kubernetes manifests, `hasura migrate create/apply/status` commands, complete Metadata API JSON bodies, JWT claim structures, Auth0/Firebase/webhook code, and CI/CD YAML. Not 5 because several examples depend on undefined placeholder functions (`sendEmail`, `processPayment`, `fetchOrderDetails`, `validateToken`, `esClient`) and some listed env vars (e.g. `HASURA_GRAPHQL_RATE_LIMIT_PER_MINUTE`) are not standard engine configuration, leaving minor gaps.

4 / 5

Workflow Clarity

Sequences are present and coherent ("How it works" 1-2-3, the six-step Auth Flow, the create/edit/apply migration flow, the GitHub Actions deploy pipeline), and a Troubleshooting section lists error fixes, but workflows involving database and batch operations (metadata apply, migrate apply, production deployment) lack explicit validation checkpoints and feedback loops — `hasura migrate status` is shown but there is no verify-after-apply or rollback-on-failure step — which caps workflow clarity at 3 per the batch/database-operation rule. Not 4 because checkpoints are absent rather than a minor gap; not 2 because steps are clearly listed and ordered.

3 / 5

Progressive Disclosure

No bundle files exist (no references/, scripts/, or assets/ directories) and everything is inlined in a single ~1670-line file: deployment manifests, five full application patterns, troubleshooting recipes, and API-level examples clearly belong in separate reference files, and the body never links out to any other file. Not 1 because section headers do provide navigable structure; not 3 because references are not merely unclearly signaled — they are entirely absent, and the inlined bulk is the core problem.

2 / 5

Total

11

/

20

Passed

Description

65%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description names a distinct, well-defined niche (Hasura) with relevant feature keywords, but it is phrased as a contents listing rather than a capability statement and provides no explicit "Use when..." trigger guidance. Its main gaps are the missing when-to-use clause and the absence of concrete action verbs and common synonyms (Postgres, subscriptions, real-time).

Suggestions

Add an explicit 'Use when...' clause, e.g. "Use when building GraphQL APIs with Hasura, configuring Hasura permissions or JWT auth, creating event triggers or Actions, or deploying Hasura to production."

Convert topic nouns into concrete action verbs, e.g. "Generate instant GraphQL APIs from PostgreSQL, configure row- and column-level permissions, integrate JWT/webhook authentication, and create event triggers and Actions."

Include natural synonyms users actually say — "Postgres", "real-time subscriptions", "schema stitching", "remote schemas" — to broaden trigger-term coverage.

DimensionReasoningScore

Specificity

Enumerates specific feature areas — "instant GraphQL APIs, permissions, authentication, event triggers, actions, and production deployment" — but they are topic nouns under the framing "Complete guide for Hasura GraphQL Engine including", with no concrete action verbs, so it reads as a table of contents rather than a capability statement. Not 2 because the enumerated areas go beyond minimal or generic; not 4 because no concrete actions are actually stated as verbs.

3 / 5

Completeness

Has a clear "what" ("Complete guide for Hasura GraphQL Engine including instant GraphQL APIs, permissions, ... production deployment") but entirely lacks a "Use when..." clause or any equivalent trigger guidance, which caps completeness at 3 per the judging guidelines. Not 4 because the "when" is not even weakly implied; not 2 because the "what" half is explicit and specific.

3 / 5

Trigger Term Quality

Contains strong natural keywords a user would say — "Hasura", "GraphQL", "permissions", "authentication", "event triggers" — but misses common variations and synonyms like "Postgres", "subscriptions", "real-time", or "schema stitching". Not 5 because coverage of natural terms is incomplete; not 3 because the terms present are natural and relevant rather than mere jargon.

4 / 5

Distinctiveness Conflict Risk

Names the specific product "Hasura GraphQL Engine" together with product-specific feature terms ("event triggers", "actions"), establishing a clear niche with minimal conflict risk against generic GraphQL skills. Confirmed against the 4 anchor: no meaningful overlap — the Hasura name is unambiguous and unlikely to trigger a wrong skill.

5 / 5

Total

15

/

20

Passed

Validation

87%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 14 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

skill_md_line_count

SKILL.md is long (1682 lines); consider splitting into references/ and linking

Warning

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

14

/

16

Passed

Repository

manutej/luxor-claude-marketplace

Path

plugins/luxor-devops-suite/skills/hasura-graphql-engine/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.