CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

bigid

BigID integration. Manage data, records, and automate workflows. Use when the user wants to interact with BigID data.

Quality

63%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Low

Low-risk findings worth noting

Fix and improve this skill with Tessl

tessl review fix ./skills/bigid/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

50%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The Membrane CLI half of this skill is genuinely good — concrete commands, state-machine handling, and sensible best practices. However, the enormous auto-generated entity list is pure padding that wastes over half the token budget, and workflow coherence suffers from broken step references and absent result-validation guidance. Cutting or externalizing the entity list and tightening the workflow would move this from mediocre to strong.

Suggestions

Remove or drastically trim the ~200-line entity list; if it has any value, move it to a references/ file with a one-line pointer from SKILL.md.

Fix the broken workflow references: define an explicit Step 2 (or renumber the sections) and reconcile the orphan '1b' heading under 'Connecting to BigID'.

Add verification guidance after running actions — e.g. check the output field, confirm record counts, and handle errors — especially before destructive operations like deletion requests.

DimensionReasoningScore

Conciseness

Roughly 200 of the ~340 body lines are a repetitive entity list (e.g. 'Data Source', 'Data Source Access Request', … 'Data Source Withdrawal of Consent Request') plus 'Use action names and parameters as needed' — heavy padding with no instructional value. Anchor 2 fits ('several unnecessary… padded sections') because the Membrane CLI half is comparatively tight; not 1 since half the document is efficient.

2 / 5

Actionability

The CLI sections give concrete, copy-paste-ready commands ('npm install -g @membranehq/cli@latest', 'membrane connection ensure "https://bigid.com" --json', 'membrane action run <actionId> --input ...') plus a flag table for proxy requests — anchor 4. Not 5: no concrete example of an actual BigID action/intent, and the entity half offers only vague direction.

4 / 5

Workflow Clarity

A sequence exists (install → login → connection ensure → poll states → search actions → run → proxy fallback) with explicit connection-state checkpoints, but 'If the returned connection has state: "READY", skip to Step 2' references a Step 2 that does not exist (numbering jumps to an orphan '1b'), and there is no verification of action results in a skill that manages and deletes data records. The missing validation for potentially destructive operations caps this at anchor 3.

3 / 5

Progressive Disclosure

The document has section structure (Install, Authentication, Connecting, Searching, Running, Proxy, Best practices), but ~200 lines of entity enumeration are inlined content that clearly belongs in a separate reference file or should be removed — matching anchor 3. No bundle files exist to offload this content.

3 / 5

Total

12

/

20

Passed

Description

61%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description is distinct because it names a specific product, and it does answer what and when, but its action language is generic ('manage', 'automate') and its trigger vocabulary is limited to 'BigID' plus generic 'data'. Rewriting the capability clause with concrete BigID operations and richer trigger phrases would lift it substantially.

Suggestions

Replace generic verbs with concrete capabilities, e.g. 'Scan data sources, run data classification, execute data subject access requests, and generate privacy reports.'

Expand the 'Use when' clause with concrete trigger phrases users would naturally say: 'Use when the user mentions BigID, data privacy compliance, DSARs, data mapping, or data classification.'

Include synonyms and natural variations (privacy, governance, sensitive data discovery) rather than relying solely on the product name.

DimensionReasoningScore

Specificity

"Manage data, records, and automate workflows" names the domain but uses only generic verbs — no concrete action comparable to 'extracts content' in anchor 3. Anchor 2 ('actions are minimal or generic') is the closest fit; it is not 1 because the domain and action verbs are at least named.

2 / 5

Completeness

Both a what ("Manage data, records, and automate workflows") and an explicit when ("Use when the user wants to interact with BigID data") are present, but the when is near-tautological and could be more specific — matching anchor 4. Not 5 (no concrete trigger phrases) and not 3 (the when is explicit, not merely implied).

4 / 5

Trigger Term Quality

"BigID" and "data" are relevant keywords, but common natural variations a privacy/governance user would say (data privacy, compliance, DSAR, data mapping, classification, scan) are absent. Coverage is thin for anchor 4, but more than the single-generic-keyword case of anchor 2.

3 / 5

Distinctiveness Conflict Risk

"BigID integration" and "interact with BigID data" define a clear product-specific niche with distinct triggers, so risk of firing for the wrong skill is minimal — anchor 5.

5 / 5

Total

14

/

20

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

15

/

16

Passed

Repository

membranedev/application-skills

Path

skills/bigid/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.