CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

comodo

Comodo integration. Manage data, records, and automate workflows. Use when the user wants to interact with Comodo data.

Quality

69%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Low

Low-risk findings worth noting

Fix and improve this skill with Tessl

tessl review fix ./skills/comodo/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

67%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body delivers strong, executable Membrane CLI guidance with a well-instrumented connection state machine and genuinely useful error-recovery loops. Its weaknesses are the filler "Comodo Overview" section listing Email/Contact/Calendar entities that appear copied from an unrelated skill and add no value, and the dangling "skip to Step 2" references with no Step 2 present. Fixing the overview block and the step numbering would move this to a top-tier instruction document.

Suggestions

Delete or rewrite the "Comodo Overview" bullet list (Email/Attachment/Contact/Calendar/Event) — it looks copied from a different skill and is irrelevant to Comodo, a cybersecurity product — and remove the filler line "Use action names and parameters as needed."

Resolve the broken step references: the body twice says "skip to Step 2" but no Step 2 exists; either number the sections consistently (1, 1b, 2, ...) or replace the references with the actual section names (e.g., "skip to Searching for actions").

Populate the "Popular actions" section with a few real, named Comodo actions (with example invocations) instead of only repeating the action-discovery command.

DimensionReasoningScore

Conciseness

The body is mostly efficient CLI documentation, but the "Comodo Overview" section (Email/Attachment/Contact/Calendar/Event bullets plus the filler line "Use action names and parameters as needed.") is padding that appears copied from an unrelated skill, and the generic company blurb adds little. This matches "mostly efficient but includes some unnecessary explanation"; it is not a 4 because that overview block is clearly trimmable.

3 / 5

Actionability

Concrete, copy-paste-ready commands throughout: "npm install -g @membranehq/cli@latest", "membrane connection ensure \"https://www.comodo.com/\" --json", "membrane action run <actionId> --input '{...}' --json", plus a full proxy flag table. Minor gap: the "Popular actions" section contains only the discovery command and no actual named actions, so it is not a 5.

4 / 5

Workflow Clarity

The install → login (with headless fallback) → connection ensure → poll-state workflow has strong checkpoints, explicitly handling READY, CLIENT_ACTION_REQUIRED, and CONFIGURATION_ERROR/SETUP_FAILED with re-poll feedback loops. However, the text says "skip to Step 2" twice while no Step 2 heading exists (numbering jumps from "1b"), so the sequence reference is incoherent; this keeps it below 5.

4 / 5

Progressive Disclosure

No bundle files exist and the body references none, so there are no broken or nested references; section headers organize the ~140-line single file reasonably well. This matches "good structure; most content appropriately placed; minor organization gaps" — it is not a 5 because the inlined proxy flag table and connection-state detail could live in a one-level-deep reference file with clearer navigation.

4 / 5

Total

15

/

20

Passed

Description

57%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description has the required structure (what + explicit "Use when" trigger) and names a distinct product, so it is functional. However, its capability language is generic filler ("manage data, records, and automate workflows") that could describe almost any integration, and it contains no Comodo-specific actions or natural trigger synonyms. It reads as a templated description rather than one written for Comodo's actual cybersecurity domain.

Suggestions

Replace the generic "Manage data, records, and automate workflows" with 2-3 concrete Comodo-specific capabilities (e.g., querying device/security posture data, managing endpoint policies, retrieving antivirus alerts).

Add natural trigger terms and synonyms users would actually say, such as "Comodo", "Comodo antivirus", "Comodo internet security", or specific Comodo product names, to the "Use when" clause.

Make the "when" clause more concrete about use cases, e.g. "Use when the user wants to interact with Comodo security data, manage protected devices, or automate Comodo workflows."

DimensionReasoningScore

Specificity

"Manage data, records, and automate workflows" names only generic actions (manage, automate) with no concrete Comodo-specific capabilities, matching the anchor for naming the domain with minimal or generic actions. It is not a 3 because no 1-2 concrete, domain-specific actions are listed.

2 / 5

Completeness

It answers both "what" ("Comodo integration. Manage data, records, and automate workflows") and "when" ("Use when the user wants to interact with Comodo data") with an explicit trigger clause. It is not a 5 because the "what" is generic and the "when" lacks concrete trigger phrases or use cases.

4 / 5

Trigger Term Quality

The only natural keywords are "Comodo" and "Comodo data", with no product-level synonyms or variations users would say (e.g., antivirus, internet security, endpoint protection). This is some relevant keyword coverage but missing common variations, so not a 4.

3 / 5

Distinctiveness Conflict Risk

"Comodo" is a distinct product name with a niche trigger ("interact with Comodo data"), giving minimal conflict risk, but the generic "Manage data, records, and automate workflows" phrasing overlaps with any data-integration skill. This is mostly distinct with minor overlap risk, not a clear fully-distinct 5.

4 / 5

Total

13

/

20

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

15

/

16

Passed

Repository

membranedev/application-skills

Path

skills/comodo/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.