CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

codacy

Codacy integration. Manage Repositories, Organizations. Use when the user wants to interact with Codacy data.

Quality

69%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Low

Low-risk findings worth noting

Fix and improve this skill with Tessl

tessl review fix ./skills/codacy/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

63%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body is a strongly actionable CLI reference — real commands, a full action catalog, and well-handled connection-state branching with recovery paths. Its weaknesses are a marketing-style intro and other cuttable filler, a dangling "Step 2" reference in an otherwise unnumbered workflow, and no progressive disclosure: everything, including boilerplate and catalog reference material, is inlined in a single file.

Suggestions

Trim the three-sentence product intro to one line and delete filler like "Use action names and parameters as needed." — Claude needs the operational commands, not a description of what Codacy is for.

Extract the Membrane auth/connection boilerplate (and optionally the full 16-action table) into a references/ file, keeping a quick-start and a handful of top actions inline in SKILL.md.

Fix the dangling "skip to Step 2" references by numbering the workflow steps explicitly, and clarify that the table's "Key" value is what gets passed as <actionId> to "membrane action run".

DimensionReasoningScore

Conciseness

The intro paragraph ("Codacy is a code analytics platform that helps developers and teams monitor and improve code quality… reduce technical debt") is product-pitch filler, and "Use action names and parameters as needed." adds no instruction. This fits anchor 3 ("Mostly efficient but includes some unnecessary explanation or could be tightened"); it is above 2 because the bulk of the body is dense command and table reference with little padding.

3 / 5

Actionability

Concrete, copy-paste commands appear throughout ("npm install -g @membranehq/cli@latest", "membrane connection ensure \"https://www.codacy.com/\" --json", "--input '{\"key\": \"value\"}'") alongside a 16-action catalog. This matches anchor 4 ("Mostly executable guidance; concrete code or commands with minor gaps"); it falls short of 5 because "membrane action run <actionId>" never shows a concrete action id and the table's "Key" column is never explicitly linked to <actionId>.

4 / 5

Workflow Clarity

The sequence (install → login → connection ensure → poll → search → run) is clear, with explicit state-based checkpoints (READY, CLIENT_ACTION_REQUIRED, CONFIGURATION_ERROR) and recovery guidance ("poll again… to check if the state moved to READY"). This fits anchor 4; it is not 5 because the body twice says "skip to Step 2" yet no section is labeled Step 2 and the steps are not numbered, and it is not 3 because checkpoints are present and explicit.

4 / 5

Progressive Disclosure

There are no bundle files — all 157 lines live inline in SKILL.md — and the 16-row action table plus the Membrane auth/connection boilerplate are reference-grade content that belongs in separate files. This matches anchor 3 ("Some structure but could be better organized… content that should be separate is inline"); it is above 2 because headers are clear and the document is easy to navigate.

3 / 5

Total

14

/

20

Passed

Description

61%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description has an explicit when-clause and a highly distinctive brand-based trigger, but its capability statement relies on the generic verb "Manage" and never surfaces the concrete actions the skill actually supports. Keyword coverage beyond "Codacy" itself is thin, missing the functional vocabulary (code quality, issues, pull requests) users would naturally use.

Suggestions

Replace the generic "Manage Repositories, Organizations" with concrete actions drawn from the skill's own catalog, e.g. "List repositories and pull requests, get commit analyses, and retrieve code quality issues from Codacy."

Add natural trigger phrases to the when-clause, e.g. "Use when the user mentions Codacy, code quality issues, pull request analysis, or security dashboards."

Cut the filler phrase "interact with Codacy data" — it adds no capability information and dilutes the trigger.

DimensionReasoningScore

Specificity

"Manage Repositories, Organizations" and "interact with Codacy data" use only generic verbs — no concrete actions are explicitly stated, even though the body's catalog contains specific ones (e.g. "List Pull Request Issues", "Get Security Dashboard"). This matches anchor 2 ("Names the domain but actions are minimal or generic") rather than 3, which requires 1-2 concrete actions; it is above anchor 1 because the domain and two entity targets are named.

2 / 5

Completeness

Both parts are present: what ("Manage Repositories, Organizations") and when ("Use when the user wants to interact with Codacy data"). The when-clause is explicit but generic, matching anchor 4 ("'when' could be more explicit or specific"); it is not 5 because it lacks concrete trigger phrases, and not 3 because the when is explicitly stated rather than merely implied.

4 / 5

Trigger Term Quality

"Codacy" (repeated three times), "Repositories", and "Organizations" are relevant keywords a user would naturally say, but common functional variations — "code quality", "code review", "issues", "static analysis" — are missing. This fits anchor 3 ("Some relevant keywords but missing common variations or synonyms"); it falls short of 4 because coverage beyond the brand name is thin.

3 / 5

Distinctiveness Conflict Risk

"Codacy integration" combined with a brand-name trigger ("Use when the user wants to interact with Codacy data") carves a clear niche with minimal conflict risk — a user invoking this skill will almost certainly have named Codacy. This matches anchor 5; it is not 4 because the product-name trigger leaves no meaningful overlap with related code-quality skills.

5 / 5

Total

14

/

20

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

15

/

16

Passed

Repository

membranedev/application-skills

Path

skills/codacy/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.