CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

complianceai

Compliance.ai integration. Manage data, records, and automate workflows. Use when the user wants to interact with Compliance.ai data.

Quality

69%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Low

Low-risk findings worth noting

Fix and improve this skill with Tessl

tessl review fix ./skills/complianceai/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

67%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body delivers a largely executable Membrane-based workflow with good connection-state handling, but it is a generic Membrane CLI guide wearing a Compliance.ai title — no Compliance.ai-specific actions or examples appear, and broken "Step 2" references betray an incomplete template. Cleaning the filler line and the broken references would lift it materially.

Suggestions

Delete the apologetic docs line ("I am sorry, but I cannot find...") and the filler "Use action names and parameters as needed"; state plainly that no public API docs exist and that actions must be discovered via `membrane action list`.

Fix the navigation: define Step 1/Step 2 numbering or replace both "skip to **Step 2**" references and the orphan "#### 1b" heading with descriptive section links.

Add at least one worked Compliance.ai example (e.g. an action list --intent "search regulations" result and the corresponding action run command) so the skill is distinguishable from a generic Membrane integration guide.

DimensionReasoningScore

Conciseness

The body is mostly efficient CLI commands, but it carries clear waste: the apologetic filler line "I am sorry, but I cannot find a publicly accessible API or developer documentation URL", the vague filler "Use action names and parameters as needed", and a rambling agent-types note. This matches anchor 3 (mostly efficient, some unnecessary explanation that could be tightened) rather than 4, where only minor trimming would be needed.

3 / 5

Actionability

Commands are concrete and mostly copy-paste ready (install, login with headless fallback, connection ensure, action list/run with --input JSON, request with a full flag table). It falls short of anchor 5 because there are no Compliance.ai-specific action examples (actionIds are only placeholders), "skip to **Step 2**" points to a section that does not exist, and the invocation style is inconsistent ("membrane" vs "npx @membranehq/cli" vs "npx @membranehq/cli@latest").

4 / 5

Workflow Clarity

The sequence (install → login → connection ensure → poll state → handle clientAction/errors → search actions → run → proxy) is clear and includes explicit checkpoints for connection readiness and error states (CONFIGURATION_ERROR, SETUP_FAILED, re-poll after user action). It is not anchor 5 because the "Step 2" reference is broken in two places, the "1b" heading implies step numbering that was never defined, and there is no validation guidance for action-run output or failures.

4 / 5

Progressive Disclosure

No bundle files exist, so all content lives in a single SKILL.md; sections are well organized with clear headers, no nested references, and content of roughly appropriate size for a single overview. It is anchor 4 (good structure, most content appropriately placed) rather than 5: the "## Popular actions" section duplicates the earlier "### Searching for actions" command, and the proxy flag table plus agent-types detail could be consolidated or trimmed.

4 / 5

Total

15

/

20

Passed

Description

57%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description has the right shape — a named domain and an explicit "Use when" clause — but its capability language is generic and its trigger coverage is thin. Users would say "regulatory changes" or "compliance updates" far more often than "interact with Compliance.ai data".

Suggestions

Replace the generic "Manage data, records, and automate workflows" with concrete capabilities drawn from the skill's own overview, e.g. "Track regulatory changes, search regulations, rules, and documents, manage folders".

Broaden the "Use when" clause with natural trigger phrases: "Use when the user mentions Compliance.ai, regulatory changes, regulatory updates, or compliance rules".

Mention key domain objects (regulations, rules, documents, entities) in the description so it is distinguishable from generic data-management skills.

DimensionReasoningScore

Specificity

"Manage data, records, and automate workflows" names the Compliance.ai domain but every action is generic — no concrete capability like regulatory change tracking, rule monitoring, or document search is stated. It fits anchor 2 (domain named, actions minimal or generic) rather than 3, which requires 1-2 concrete actions.

2 / 5

Completeness

Both parts are present: a what ("Compliance.ai integration. Manage data, records, and automate workflows") and an explicit when ("Use when the user wants to interact with Compliance.ai data"). It stops short of anchor 5 because the what is vague and the when gives no concrete trigger phrases beyond repeating "Compliance.ai data".

4 / 5

Trigger Term Quality

"Compliance.ai" is a strong natural term and "data"/"records" are relevant, but common user phrasings such as "regulatory changes", "regulations", "rules", or "compliance updates" are absent. This matches anchor 3 (some relevant keywords, missing common variations) rather than 4, which expects good coverage of natural terms.

3 / 5

Distinctiveness Conflict Risk

"Compliance.ai" carves a clear niche with the trigger keyed to that specific product, but "Manage data, records, and automate workflows" is generic enough to overlap with broad data-management or workflow-automation skills. This is anchor 4 (mostly distinct, minor overlap risk) rather than 5, whose example pairs a distinct niche with fully distinct triggers.

4 / 5

Total

13

/

20

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

15

/

16

Passed

Repository

membranedev/application-skills

Path

skills/complianceai/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.