CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

cloudentity

Cloudentity integration. Manage data, records, and automate workflows. Use when the user wants to interact with Cloudentity data.

Quality

69%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./skills/cloudentity/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

67%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body delivers a mostly executable workflow with concrete Membrane CLI commands, a sensible connection state machine, and well-organized sections. Its main weaknesses are redundant auth explanations, a dangling "Step 2" reference, and no validation guidance for action results.

Suggestions

Consolidate the three separate explanations of Membrane's automatic credential handling into one statement to trim repeated content.

Label the post-connection steps explicitly (e.g. a "Step 2: Discover actions" heading) so the twice-referenced "Step 2" resolves, and remove the filler line "Use action names and parameters as needed.".

Add a brief validation step after running actions (e.g. checking the `output` field or error status in the JSON response) to close the feedback loop.

DimensionReasoningScore

Conciseness

Credential handling is explained three times ("Membrane handles authentication and credentials refresh automatically", "Let Membrane handle credentials — never ask the user for API keys", and again under Proxy requests), and filler lines like "Use action names and parameters as needed." add tokens without information. Mostly efficient but with unnecessary repetition — anchor 3.

3 / 5

Actionability

Concrete, copy-paste commands throughout: "npm install -g @membranehq/cli@latest", "membrane connection ensure \"https://cloudentity.com/\" --json", "membrane action run <actionId> --connectionId=CONNECTION_ID --input '{\"key\": \"value\"}' --json", plus a flags table for proxy requests. Minor gaps (login example lacks a value for --tenant/--clientName, "Step 2" is referenced but never labeled) keep it at anchor 4 rather than 5.

4 / 5

Workflow Clarity

A clear sequence runs install → login → connection ensure → poll states → discover actions → run → proxy fallback, with a polling feedback loop and explicit state-based branching (READY / CLIENT_ACTION_REQUIRED / CONFIGURATION_ERROR). However, "skip to **Step 2**" appears twice pointing to a step that is never labeled, and results of action runs are not validated — anchor 4 (most checkpoints present, minor validation gaps).

4 / 5

Progressive Disclosure

The single-file body is well organized with clear section headers and everything one level deep; no bundle files exist. Minor gaps: the proxy flags table and the clientAction state-machine detail could live in a reference file. Fits anchor 4 (good structure, minor organization gaps) rather than 5.

4 / 5

Total

15

/

20

Passed

Description

57%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description has an explicit 'Use when' clause and a distinctive domain name, but its capability statement is generic and its trigger vocabulary is limited to the product name plus vague terms. Naming the actual Cloudentity operations (authorization policies, API security, access control, consent) would strengthen both specificity and trigger coverage.

Suggestions

Replace the generic capability statement with concrete Cloudentity actions, e.g. "Manage authorization policies, clients, scopes, and access entitlements in Cloudentity" instead of "Manage data, records, and automate workflows".

Add natural trigger phrases and synonyms users would say, such as "API authorization", "access control", "fine-grained permissions", or "consent" alongside the product name.

Make the 'when' clause more specific, e.g. "Use when the user mentions Cloudentity, API authorization, access policies, or fine-grained permissions".

DimensionReasoningScore

Specificity

"Manage data, records, and automate workflows" names the domain but the actions are generic — no concrete Cloudentity operations (policies, scopes, clients, entitlements) are listed. This matches anchor 2 ("Names the domain but actions are minimal or generic") rather than anchor 3, which requires 1-2 concrete actions.

2 / 5

Completeness

Both parts are explicitly present: what ("Manage data, records, and automate workflows") and when ("Use when the user wants to interact with Cloudentity data"). The 'when' clause is explicit, so the cap of 3 does not apply; the 'what' is somewhat vague, fitting anchor 4 rather than 5.

4 / 5

Trigger Term Quality

"Cloudentity" is the one strong natural term a user would say, but the description omits common domain phrases and synonyms users might use (authorization, API security, access control, policies, consent). Fits anchor 3: some relevant keywords, missing common variations.

3 / 5

Distinctiveness Conflict Risk

"Cloudentity" is a distinctive proper noun giving a clear niche with low conflict risk, but the surrounding trigger language ("data", "records", "automate workflows") is generic and could overlap with broad data-management skills. Anchor 4 fits better than 5, which requires distinct triggers beyond a single proper noun.

4 / 5

Total

13

/

20

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

15

/

16

Passed

Repository

membranedev/application-skills

Path

skills/cloudentity/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.