CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

advantage-csp

Advantage CSP integration. Manage data, records, and automate workflows. Use when the user wants to interact with Advantage CSP data.

Quality

65%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Low

Low-risk findings worth noting

Fix and improve this skill with Tessl

tessl review fix ./skills/advantage-csp/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

57%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body is strong on executable commands — the auth, connection lifecycle, and proxy sections are concrete and usable — but it is undermined by broken navigation ('skip to Step 2' with no Step 2, '1b' without '1a'), an empty 'Popular actions' section, and an unexplained entity list that reads like template residue. Adding run-result verification and a few worked action examples would lift it substantially.

Suggestions

Fix the navigation: label the actual steps (or replace 'skip to Step 2' and the orphan '1b' heading with named sections), and remove or explain the bare Customer/Subscription/Invoice entity list.

Make 'Popular actions' earn its heading: list a few concrete example invocations with realistic action ids and --input payloads, including how to inspect the output field and handle errors after 'action run'.

Pick one CLI invocation style (membrane vs npx @membranehq/cli) and use it consistently; the current mix of lines 78 and 112 with the rest invites confusion.

DimensionReasoningScore

Conciseness

Mostly efficient — commands come with tight, useful explanations (headless auth flow, connection-state decision tree, proxy flag table) — but there is padding: the bare entity bullet list (Customer/Subscription/Invoice/...) explains nothing, 'Popular actions' repeats the discovery command already shown in 'Searching for actions', and the agent-types aside is vague. Matches anchor 3; not 4, because several sections could be trimmed or removed outright; not 2, because it never lectures on concepts Claude already knows.

3 / 5

Actionability

Nearly everything is copy-paste-ready bash: install, login (including the headless completion flow), 'connection ensure', polling with --wait, action search/run with --input JSON, and proxy requests with a flag table. Matches anchor 4 ('Mostly executable guidance... minor gaps'); not 5, because no worked example with a real action id and input is shown and the 'Popular actions' section lists none; not 3, because nothing shown is pseudocode or abstract.

4 / 5

Workflow Clarity

The install → auth → connect → poll → handle clientAction → search → run sequence is present and the connection-state decision handling (READY / CLIENT_ACTION_REQUIRED / CONFIGURATION_ERROR) is genuinely useful, but the body says 'skip to **Step 2**' and no Step 2 is ever labeled (and '1b' has no '1a'), section ordering is jumbled, and there is no verification of action-run results or error handling after 'action run'. Matches anchor 3 ('Steps listed but validation gaps'); not 4, because the broken cross-references and missing run-result checkpoints are more than minor gaps.

3 / 5

Progressive Disclosure

A single well-sectioned file with no bundle files and no nested references — navigation is possible — but at ~140 lines it exceeds the simple-skill exception, and organization gaps remain: a dangling entity list with no purpose, an empty 'Popular actions' heading, and broken step numbering. Matches anchor 3 ('Some structure but could be better organized'); not 4, because content that should be curated or split (entity overview, actual popular actions) is either missing or unintegrated.

3 / 5

Total

13

/

20

Passed

Description

57%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description correctly uses third person and includes an explicit 'Use when...' clause, but it is thin: it names the product and stops. The actions are generic ('manage data', 'automate workflows') and it misses the natural vocabulary of the domain (cloud security posture, CSPM, findings, compliance) that would help users trigger it.

Suggestions

Replace generic actions with concrete capabilities drawn from the platform, e.g. 'Query security findings and compliance data, manage records, and run remediation workflows'.

Add domain trigger terms users would actually say: 'cloud security posture management (CSPM)', 'cloud security findings', 'remediation', 'compliance monitoring', 'Akamai'.

Specify the 'when' more concretely, e.g. 'Use when the user mentions Advantage CSP, wants to check or fix cloud security findings, or asks about CSPM compliance data.'

DimensionReasoningScore

Specificity

"Manage data, records, and automate workflows" names the Advantage CSP domain but the actions are entirely generic ("manage", "automate") with no concrete operations listed. This matches the anchor 'Names the domain but actions are minimal or generic' — not 3, because no 1-2 concrete actions like 'query findings' or 'create records' are given; not 1, because the domain is named.

2 / 5

Completeness

Both parts are present: a what ("Advantage CSP integration. Manage data, records, and automate workflows") and an explicit when ("Use when the user wants to interact with Advantage CSP data"). Matches anchor 4 — the when is explicit but could be more specific and the what is vague; not 5, because there are no concrete trigger phrases.

4 / 5

Trigger Term Quality

"Advantage CSP" is the natural term a user would say, but the description offers no synonyms or related phrases a user might use — 'cloud security posture', 'CSPM', 'security findings', 'compliance', or 'Akamai' — matching the anchor 'Some relevant keywords but missing common variations or synonyms'. Not 4: keyword coverage is one product name plus the generic word 'data'.

3 / 5

Distinctiveness Conflict Risk

Being tied to a named product ("Advantage CSP") gives it a clear niche with minimal conflict risk, but the generic "Manage data, records, and automate workflows" clause could weakly overlap with other data-management skills. Matches anchor 4 ('Mostly distinct; minor overlap risk'); not 5, since the trigger 'interact with Advantage CSP data' is broad.

4 / 5

Total

13

/

20

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

15

/

16

Passed

Repository

membranedev/application-skills

Path

skills/advantage-csp/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.