Name: 42crunch
Rating: 52.8 (1 reviews)
Author: membranedev

42crunch

42Crunch integration. Manage data, records, and automate workflows. Use when the user wants to interact with 42Crunch data.

Quality

58%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

Securityby

Low

Low-risk findings worth noting

Fix and improve this skill with Tessl

tessl review fix ./skills/42crunch/SKILL.md

Quality

Content

77%

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

This is a solid, actionable skill with clear executable commands and a well-structured connection workflow with proper state handling. The main weaknesses are some unnecessary introductory explanation about what 42Crunch is (which Claude doesn't need) and the lack of progressive disclosure through supporting files. The workflow clarity is strong with explicit branching logic and polling instructions.

Suggestions

Remove the introductory paragraph explaining what 42Crunch is and what it's used for — Claude doesn't need this context to execute the integration.

Consider extracting the proxy request flags table and connection state machine details into separate reference files to keep the main SKILL.md leaner.

Dimension	Reasoning	Score
Conciseness	The content includes some unnecessary explanation (e.g., 'It's used by developers and security teams to identify vulnerabilities...') and the overview of what 42Crunch is. However, the CLI commands and workflow steps are reasonably efficient. The hierarchy diagram and best practices section add value but could be tighter.	2 / 3
Actionability	The skill provides fully executable CLI commands for every step: installation, authentication, connection setup, action discovery, action execution, and proxy requests. Commands are copy-paste ready with clear parameter placeholders and a useful flags reference table.	3 / 3
Workflow Clarity	The multi-step connection workflow is clearly sequenced with explicit state-based branching (READY, CLIENT_ACTION_REQUIRED, CONFIGURATION_ERROR), polling instructions with --wait flag, and clear guidance on what to do at each state. The headless authentication flow includes a feedback loop for code completion.	3 / 3
Progressive Disclosure	The content is well-structured with clear sections and headers, but it's a single monolithic file with no references to supporting documents. The proxy request options table and the full connection state machine details could potentially be split out, though the overall length is manageable. No bundle files are provided to offload detail.	2 / 3
	Total	10 / 12 Passed

Description

40%

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

This description is a generic template-style entry that relies almost entirely on the product name '42Crunch' for differentiation. It fails to describe what 42Crunch actually does (API security scanning, audit, compliance) or what specific actions the skill enables. The 'Use when' clause is circular and provides no meaningful trigger guidance beyond the product name.

Suggestions

Replace generic phrases like 'manage data, records, and automate workflows' with specific 42Crunch capabilities such as 'scan APIs for security vulnerabilities, audit OpenAPI specifications, manage API security compliance'.

Add domain-specific trigger terms users would naturally say, such as 'API security', 'OpenAPI', 'API audit', 'vulnerability scan', 'API compliance'.

Expand the 'Use when' clause with concrete scenarios, e.g., 'Use when the user mentions 42Crunch, API security scanning, OpenAPI spec auditing, or API vulnerability assessment'.

Dimension	Reasoning	Score
Specificity	The description uses vague language like 'manage data, records, and automate workflows' without specifying any concrete actions. It doesn't explain what kind of data, what records, or what workflows are involved with 42Crunch.	1 / 3
Completeness	It has a 'Use when' clause ('Use when the user wants to interact with 42Crunch data'), but the 'what' portion is extremely generic ('manage data, records, and automate workflows') and the 'when' clause is essentially a tautology that doesn't add meaningful trigger guidance.	2 / 3
Trigger Term Quality	It includes '42Crunch' as a trigger term which is specific to the product, but lacks natural keywords users might say such as 'API security', 'API audit', 'OpenAPI', 'swagger', or other terms associated with 42Crunch's domain.	2 / 3
Distinctiveness Conflict Risk	The mention of '42Crunch' provides some distinctiveness as a named product, but 'manage data, records, and automate workflows' is so generic it could overlap with dozens of other integration skills. Only the product name prevents a score of 1.	2 / 3
	Total	7 / 12 Passed

Validation

90%

Warnings & errors only

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 10 / 11 Passed

Validation for skill structure

Criteria	Description	Result
frontmatter_unknown_keys	Unknown frontmatter key(s) found; consider removing or moving to metadata	Warning

	Total	10 / 11 Passed

Repository: membranedev/application-skills
Path: skills/42crunch/SKILL.md
Commit: f484c82

Reviewed: 1 day ago

Table of Contents

Discovery Implementation Validation

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.