CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

authlete

Authlete integration. Manage data, records, and automate workflows. Use when the user wants to interact with Authlete data.

Quality

60%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./skills/authlete/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

45%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The Membrane CLI operating instructions are genuinely strong — executable commands, a clear connection state machine, and sensible best practices — but they are buried after ~300 lines of irrelevant keyword padding that wastes most of the skill's token budget. Deleting or externalizing the overview list would transform the skill's quality.

Suggestions

Delete the 'Authlete Overview' bullet list (~300 lines of file formats and tracker-module terms irrelevant to OAuth work); it contributes nothing Claude cannot already infer and consumes the bulk of the context window.

Fix the workflow cross-references: label an explicit 'Step 2' (searching/running actions) since the text says 'skip to Step 2', and either populate 'Popular actions' with real action names or remove the section.

If any extended material is genuinely needed (e.g. a curated Authlete API entity reference), move it into a references/ file with a clearly signaled one-level-deep link from SKILL.md.

DimensionReasoningScore

Conciseness

The 'Authlete Overview' section is roughly 300 lines of padded term-listing (file extensions, audio formats, 'ScreamTracker', 'ProTracker Module') that is irrelevant filler, matching the 'severely verbose; heavily padded' anchor rather than the milder over-explanation of score 2.

1 / 5

Actionability

Concrete executable commands cover the full path (install, login, connection ensure, action list/run with --input JSON, proxy request with a flags table), with only minor gaps such as the 'Popular actions' section listing no actual actions and the vague 'Use action names and parameters as needed'.

4 / 5

Workflow Clarity

The install -> login -> connect -> poll-state -> search-actions -> run -> proxy-fallback sequence is clear with state-based checkpoints (READY/BUILDING/CLIENT_ACTION_REQUIRED) and error guidance, but 'skip to Step 2' references a step that is never labeled, leaving a minor sequencing gap.

4 / 5

Progressive Disclosure

There are no bundle files and no references; the body is a single file whose dominant content is an inlined 300-line term wall that belongs in a curated reference (or nowhere), matching the 'minimal structure / content that belongs in separate files is inlined' anchor.

2 / 5

Total

11

/

20

Passed

Description

57%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description correctly names the Authlete niche and includes an explicit use-when clause, but its capability statements are generic and it omits the OAuth/OIDC vocabulary users would naturally use when needing this skill. It is functional but underspecified for both triggering and capability communication.

Suggestions

Replace the generic 'Manage data, records, and automate workflows' with concrete Authlete capabilities, e.g. 'Manage OAuth 2.0 clients, tokens, grants, and scopes; configure authorization and introspection endpoints'.

Add natural trigger synonyms to the 'Use when' clause: 'Use when the user mentions Authlete, OAuth 2.0, OpenID Connect, auth server configuration, or token introspection'.

State the operation mode (drives Authlete via the Membrane CLI) so the 'what' is specific to this skill rather than interchangeable with any integration skill.

DimensionReasoningScore

Specificity

"Manage data, records, and automate workflows" names the Authlete domain but the actions are generic buzzwords with no concrete OAuth 2.0/OpenID Connect operations, matching the anchor for minimal or generic actions rather than the 1-2 concrete actions of score 3.

2 / 5

Completeness

It has both a 'what' ("Manage data, records, and automate workflows") and an explicit 'when' clause ("Use when the user wants to interact with Authlete data"), but the 'what' is vague and the 'when' lacks concrete trigger phrases, so it matches score 4 rather than the fully explicit score 5.

4 / 5

Trigger Term Quality

"Authlete" is a relevant natural keyword, but the description omits the common variations and synonyms users would actually say ("OAuth", "OpenID Connect", "authentication", "authorization", "tokens"), fitting the 'some relevant keywords but missing variations' anchor.

3 / 5

Distinctiveness Conflict Risk

"Authlete integration" and "interact with Authlete data" are clearly niche triggers, but the generic "Manage data, records, and automate workflows" phrasing creates minor overlap risk with generic data-management and workflow-automation skills.

4 / 5

Total

13

/

20

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

15

/

16

Passed

Repository

membranedev/application-skills

Path

skills/authlete/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.