CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

chocolatey

Chocolatey integration. Manage data, records, and automate workflows. Use when the user wants to interact with Chocolatey data.

Quality

65%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Low

Low-risk findings worth noting

Fix and improve this skill with Tessl

tessl review fix ./skills/chocolatey/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

67%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body delivers a coherent, executable Membrane-based workflow for Chocolatey with concrete commands, state-machine handling for connection readiness, and a useful proxy escape hatch. Weaknesses are modest: an unnecessary what-is-Chocolatey intro and empty overview section, no instantiated end-to-end example, and slightly broken step numbering ('Step 2', '1b') in the connection flow.

Suggestions

Delete the opening paragraph explaining what Chocolatey is and the 'Chocolatey Overview' bullet hierarchy ('Package / Package Version / Source' with 'Use action names and parameters as needed') — Claude already knows what Chocolatey is, and these add tokens without guidance.

Fix the broken step references: label the connecting section '1a' (or drop the numbering) and either label a 'Step 2' section or replace 'skip to Step 2' with the actual section name ('Searching for actions').

Add one concrete worked example — e.g., discovering an install-package action via 'membrane action list --intent "install a chocolatey package"' and running it with a real --input payload — so users see the full loop instantiated.

DimensionReasoningScore

Conciseness

The bulk is lean, executable CLI commands, but the doc includes unnecessary explanation Claude already knows — the opening paragraph defining what Chocolatey is ('Chocolatey is a package manager for Windows, similar to apt or yum...') — plus a hollow 'Package / Package Version / Source' overview and filler like 'Use action names and parameters as needed'. This matches anchor 3 (mostly efficient with some unnecessary explanation that could be tightened); it is above anchor 2 because padding is confined to a few spots rather than permeating the document.

3 / 5

Actionability

Concrete, copy-paste-ready commands cover every phase — CLI install, login (including headless completion), connection ensure/poll, action search/run with JSON --input, and proxy requests with a full options table. It sits at anchor 4 rather than 5 because there is no worked end-to-end example of an actual Chocolatey operation (e.g., discovering and running a 'install package' action with real parameter values); placeholders like CONNECTION_ID and <actionId> are never instantiated.

4 / 5

Workflow Clarity

A clear sequence runs install → login → connection ensure → poll for READY → search actions → run, with an explicit validation loop (long-poll with --wait, re-poll after CLIENT_ACTION_REQUIRED, inspect error on CONFIGURATION_ERROR/SETUP_FAILED) and per-state next-step guidance, matching anchor 4. Minor gaps keep it from anchor 5: the text says 'skip to Step 2' but no step is labeled 'Step 2', and section '1b' has no labeled '1a' counterpart.

4 / 5

Progressive Disclosure

No bundle files exist, so all content is inline in a single ~140-line document with clear, well-ordered section headers matching the install/auth/connect/act/proxy flow — anchor 4 ('good structure; most content appropriately placed; minor organization gaps'). It is below anchor 5 only because the proxy flag table and the detailed connection-state troubleshooting could live in a references file to keep SKILL.md a leaner overview, and above anchor 3 because nothing is buried and navigation is easy.

4 / 5

Total

15

/

20

Passed

Description

48%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description names the Chocolatey domain and includes a 'Use when' trigger anchored on the brand, but the capability statement is generic template filler ('Manage data, records, and automate workflows') that says nothing about what Chocolatey actually does. The trigger clause is circular and misses natural terms like 'choco', 'package manager', or 'install software on Windows'.

Suggestions

Replace 'Manage data, records, and automate workflows' with concrete Chocolatey capabilities, e.g. 'Install, upgrade, and uninstall Windows software packages; search package versions and sources via the Chocolatey API'.

Expand the trigger clause with natural user phrasing: 'Use when the user mentions Chocolatey, choco, installing or updating software on Windows, or managing Windows packages'.

Remove the vague 'interact with Chocolatey data' phrasing and state what data/objects are involved (packages, package versions, sources) so the trigger is not circular.

DimensionReasoningScore

Specificity

Only the domain is named ('Chocolatey integration'); the actions listed — 'Manage data, records, and automate workflows' — are generic template filler with no concrete Chocolatey capability (no mention of installing, searching, or updating packages). It is above anchor 1 because the domain is named, but below anchor 3 because no concrete Chocolatey-specific action is described.

2 / 5

Completeness

A 'Use when...' clause exists ('Use when the user wants to interact with Chocolatey data'), so the missing-trigger cap does not apply, and both what and when are nominally present. However the 'what' is vague boilerplate and the 'when' is circular ('interact with Chocolatey data' does not say what data or why), placing it below anchor 4, which requires a substantive 'what' alongside the 'when'.

3 / 5

Trigger Term Quality

'Chocolatey' is the one relevant keyword, appearing in both the capability and trigger sentences, but common natural variations users would say — 'choco', 'package manager', 'install software on Windows' — are absent. Matches anchor 3 (relevant keywords present, missing variations/synonyms) rather than anchor 2, since 'Chocolatey' is a specific domain term, not generic language.

3 / 5

Distinctiveness Conflict Risk

The brand name 'Chocolatey' appears in both the capability and trigger clause, giving a clear niche with low wrong-skill trigger risk — matching anchor 4 ('mostly distinct; minor overlap risk'). Not anchor 5 because the generic filler 'Manage data, records, and automate workflows' could pull this skill in for unrelated data/records/workflow-automation requests.

4 / 5

Total

12

/

20

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

15

/

16

Passed

Repository

membranedev/application-skills

Path

skills/chocolatey/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.