CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

chef-inspec

Chef InSpec integration. Manage data, records, and automate workflows. Use when the user wants to interact with Chef InSpec data.

Quality

67%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./skills/chef-inspec/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

67%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body delivers largely executable, command-driven guidance with a clear connect-then-act workflow and explicit connection-state checkpoints, which is its main strength. Its weaknesses are padding (a conceptual intro and a meaningless overview section), a dangling 'Step 2' reference from broken step numbering, and the absence of any concrete InSpec-specific action examples.

Suggestions

Remove the 'Chef InSpec is an open-source framework...' intro paragraph and the 'Chef InSpec Overview' bullet tree — Claude already knows what InSpec is, and the tree carries no actionable information.

Fix the broken step numbering: the text says 'skip to Step 2' and labels a section '1b', but no Step 1a or Step 2 exists — either number the workflow steps consistently or replace the references with descriptive section links.

Add one or two concrete InSpec action examples (e.g. an actual action ID from 'membrane action list' with its --input payload) so the run instructions demonstrate a real use case rather than abstract placeholders.

DimensionReasoningScore

Conciseness

The opening paragraph explains what Chef InSpec is (a concept Claude already knows), and the 'Chef InSpec Overview' bullet tree ('Profile / Resource / Result / Run / Profile / Target' plus 'Use action names and parameters as needed') conveys no actionable information. The bulk of the body is tight, command-focused guidance, so overall it matches 'mostly efficient but includes some unnecessary explanation or could be trimmed' rather than the noticeably-verbose level-2 anchor.

3 / 5

Actionability

The body gives copy-paste-ready commands for every phase — install, login (including headless code completion), connection ensure with polling, action list/run with --input JSON, and a proxy flag table. It falls short of level 5 because no concrete InSpec-specific action examples are shown (action IDs stay abstract placeholders) and invocation is inconsistent between 'membrane' and 'npx @membranehq/cli'.

4 / 5

Workflow Clarity

The sequence (install → login → connect → poll → search actions → run → proxy fallback) is clear, and the connection-state guidance (READY / CLIENT_ACTION_REQUIRED with clientAction fields / CONFIGURATION_ERROR) provides explicit checkpoints and recovery instructions. It misses level 5 because the doc references '**Step 2**' and '#### 1b' with no Step 1a or Step 2 labels anywhere — broken sequence anchors that leave the numbering incoherent.

4 / 5

Progressive Disclosure

This is a single-file skill with no bundle directories (references/, scripts/, assets/ do not exist), and sections are well-organized with clear headers. It matches 'good structure; most content appropriately placed; minor organization gaps' — the gaps being the dead 'Chef InSpec Overview' section and the near-empty 'Popular actions' section that contains only a discovery command.

4 / 5

Total

15

/

20

Passed

Description

52%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description identifies a distinctive niche (Chef InSpec) and includes an explicit 'Use when' clause, but its capability statement is generic ('Manage data, records, and automate workflows') and its trigger guidance is circular, offering no natural synonyms like 'compliance' or 'security scan'. It is serviceable but well short of the strong examples in the rubric.

Suggestions

Replace 'Manage data, records, and automate workflows' with concrete InSpec actions, e.g. 'Run InSpec profiles, view scan and compliance results, and manage profiles across targets'.

Add natural trigger terms and synonyms to the 'Use when' clause, such as 'compliance scanning', 'security scans', 'InSpec profiles', or 'infrastructure compliance'.

Make the 'when' guidance specific rather than circular — describe the situations prompting use (e.g. 'when the user wants to audit infrastructure compliance or run InSpec checks') instead of restating 'interact with Chef InSpec data'.

DimensionReasoningScore

Specificity

The description names the domain ('Chef InSpec integration') but its actions are generic — 'Manage data, records, and automate workflows' says nothing concrete about InSpec's actual capabilities (profiles, scans, compliance results). It sits at 'names the domain but actions are minimal or generic', below the level-3 anchor which requires 1-2 concrete actions.

2 / 5

Completeness

A 'Use when...' clause is present ('Use when the user wants to interact with Chef InSpec data') so the score is not capped, but the 'what' is vague ('Manage data, records') and the 'when' is circular, restating the domain name rather than adding concrete triggers. It falls between the level-3 and level-4 anchors, on the weaker side of the midpoint.

3 / 5

Trigger Term Quality

'Chef InSpec' is a relevant domain keyword, but the description includes no synonyms or natural phrases users would actually say such as 'compliance', 'security scan', or 'InSpec profile'. This matches 'some relevant keywords but missing common variations or synonyms'.

3 / 5

Distinctiveness Conflict Risk

'Chef InSpec' carves out a clear niche with distinct triggers and minimal conflict risk against other skills; the only generic element is the trailing 'Manage data, records' phrase. This matches the 'clear niche with distinct triggers; minimal conflict risk' anchor.

5 / 5

Total

13

/

20

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

15

/

16

Passed

Repository

membranedev/application-skills

Path

skills/chef-inspec/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.