CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

auth0

Auth0 integration. Manage data, records, and automate workflows. Use when the user wants to interact with Auth0 data.

Quality

69%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Low

Low-risk findings worth noting

Fix and improve this skill with Tessl

tessl review fix ./skills/auth0/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

67%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body delivers strong, executable Membrane CLI guidance with a well-handled connection state machine and error-recovery branches. Its weaknesses are a knowledge-padding intro paragraph and content-free overview section, plus a dangling "Step 2" reference that breaks the workflow's navigation.

Suggestions

Delete the "Auth0 is an identity management platform..." intro paragraph — Claude already knows what Auth0 is — and remove the empty entity bullet list and the orphan "Use action names and parameters as needed" line.

Fix the dangling "skip to Step 2" reference (and the "1b" heading with no "1a"/Step 1) by numbering the actual steps or linking to the real section names.

Tighten the Best practices bullets and show one complete worked example of action discovery plus run with a concrete actionId and input.

DimensionReasoningScore

Conciseness

The body is mostly command-focused, but includes explanations Claude already knows: the opening paragraph "Auth0 is an identity management platform that provides authentication and authorization services for applications. Developers use Auth0 to add secure login...", a bare entity bullet list with no content, the orphan sentence "Use action names and parameters as needed.", and wordy best-practice prose ("This will burn less tokens and make communication more secure"). This fits 'mostly efficient but includes some unnecessary explanation or could be tightened'; it is above score 2 because padding is limited to a few sections rather than pervasive.

3 / 5

Actionability

The guidance is largely executable: copy-paste commands for install ("npm install -g @membranehq/cli@latest"), connection setup ("membrane connection ensure \"https://auth0.com\" --json"), polling with "--wait", action discovery and execution with --input JSON, and a complete proxy flag table. It falls short of 5 due to minor gaps: the login command "membrane login --tenant --clientName=<agentType>" is not fully formed (--tenant has no value shown), and no worked action-run example with a real actionId.

4 / 5

Workflow Clarity

The connection flow has a clear sequence with state-based checkpoints and error recovery: check state, poll while BUILDING, handle CLIENT_ACTION_REQUIRED via clientAction instructions, and "CONFIGURATION_ERROR or SETUP_FAILED — something went wrong. Check the error field for details." This matches 'clear sequence with most checkpoints present; minor validation gaps' — it misses 5 because the text says "skip to Step 2" but no Step 2 is defined, and running actions has no output-validation guidance.

4 / 5

Progressive Disclosure

The ~145-line body is well-sectioned (Install, Authentication, Connecting, Searching, Running actions, Proxy, Best practices) with each topic clearly headed and no nested or buried references. It is above score 3 because structure is good and nothing is mis-placed, but below 5 because the clientAction state reference and proxy flag table are inline content that could live in a separate reference file, and the under-50-line simple-skill exception does not apply.

4 / 5

Total

15

/

20

Passed

Description

57%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description correctly names the Auth0 domain and includes an explicit "Use when..." trigger, giving it acceptable completeness and distinctiveness. However, its capability statements are vague fluff ("Manage data, records, and automate workflows") with no Auth0-specific actions or natural trigger synonyms like authentication, login, SSO, or tenants.

Suggestions

Replace "Manage data, records, and automate workflows" with concrete Auth0 capabilities, e.g. "Manage Auth0 users, connections, clients, grants, and tenant logs; run actions or proxy raw API requests through Membrane."

Add natural trigger terms users would actually say: authentication, login, SSO, identity, tenants, user management, API connections — not just the bare product name "Auth0".

State the 'what' concretely (what operations this skill performs on Auth0) rather than relying on the generic "Auth0 integration" label.

DimensionReasoningScore

Specificity

The description names the domain ("Auth0 integration") but its actions are pure generic filler — "Manage data, records, and automate workflows" names no Auth0-specific capability (users, connections, clients, tenants, logs). This matches the anchor 'Names the domain but actions are minimal or generic'; it is above score 1 because a concrete domain is stated, but below score 3 because no concrete, domain-relevant actions are enumerated.

2 / 5

Completeness

Both components are explicitly present: 'what' ("Auth0 integration. Manage data, records, and automate workflows") and an explicit 'when' clause ("Use when the user wants to interact with Auth0 data"), so the missing-'Use when' cap at 3 does not apply. It does not reach 5 because the 'what' is generic fluff rather than concrete capabilities, matching 'has both what and when; one could be more explicit or specific'.

4 / 5

Trigger Term Quality

"Use when the user wants to interact with Auth0 data" carries the single natural keyword "Auth0", analogous to the anchor example "Works with PDF files". It is above score 2 because that keyword is genuinely what users would say, but below score 4 because common natural variations are absent — no "authentication", "login", "SSO", "identity", "tenant", "user management", or "connections".

3 / 5

Distinctiveness Conflict Risk

"Auth0" is a specific named service and the trigger ("interact with Auth0 data") is a clear niche, so it is mostly distinct from other skills. It falls short of 5 because the generic tail "Manage data, records, and automate workflows" creates minor overlap risk with any data-management or automation skill.

4 / 5

Total

13

/

20

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

15

/

16

Passed

Repository

membranedev/application-skills

Path

skills/auth0/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.