CtrlK
BlogDocsLog inGet started
Tessl Logo

detectify

Detectify integration. Manage Organizations. Use when the user wants to interact with Detectify data.

54

Quality

61%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./skills/detectify/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

57%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body is highly actionable with concrete Membrane CLI commands and a well-validated connection workflow, but it pads several sections and leaves destructive actions without validation steps. The inlined 16-row actions table and absence of any reference files limit progressive disclosure.

Suggestions

Add a validation/confirmation checkpoint before destructive actions (e.g., "Before delete-asset or delete-scan-profile, run list-assets/list-scan-profiles to confirm the target id, and confirm with the user before running the delete").

Move the Popular actions table into a separate reference file (e.g. references/actions.md) and link to it from a short overview, keeping SKILL.md lean.

Trim motivational padding ("so you can focus on the integration logic rather than auth plumbing", "This is the fastest way to get a connection") and fix the dangling "skip to Step 2" reference by labeling the post-connection step explicitly.

Add at least one concrete end-to-end worked example with real values (connect -> list-assets -> run an action) to lift actionability from 4 to 5.

DimensionReasoningScore

Conciseness

The body is mostly efficient concrete commands, but includes several padded/motivational lines ("so you can focus on the integration logic rather than auth plumbing", "This is the fastest way to get a connection", the agent-types tail sentence). It is not 4 because the over-explanation is more than minor, and not 2 because the bulk is tight and command-driven.

3 / 5

Actionability

It provides concrete, copy-paste-ready commands across all common cases (install, login, connection ensure/get --wait, action list/run, request/proxy) plus a full proxy-options table. It is not 5 because every example uses placeholders with no concrete end-to-end worked example tying a real table action (e.g. list-assets) to a real run command.

4 / 5

Workflow Clarity

The connection sub-flow is well-sequenced with state-based validation and a feedback loop (READY/BUILDING/CLIENT_ACTION_REQUIRED/CONFIGURATION_ERROR), but destructive actions (delete-scan-profile, delete-asset, stop-scan) are run via a bare `membrane action run` with no validation checkpoint. Per the rubric, destructive operations without validation cap workflow clarity at 3, and the "skip to Step 2" reference points to a step that is not labeled as such.

3 / 5

Progressive Disclosure

Section headers (##/###/####) give reasonable structure, but there are no bundle files at all and the 16-row Popular actions table is inlined reference content that belongs in a separate file. It is not 2 because the content is sectioned rather than a monolithic wall, and not 4 because no content is split into one-level-deep references.

3 / 5

Total

13

/

20

Passed

Description

66%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description correctly states both what the skill does and when to use it, and its product-specific framing gives it strong distinctiveness. Its weaknesses are thin, slightly generic capability and trigger language that omits the natural task terms (scan, vulnerability) a user would actually say.

Suggestions

Replace "Manage Organizations" with the skill's actual capabilities (e.g., "Manage scan profiles, assets, and scans") so the "what" matches the body and is more concrete.

Add concrete trigger phrases to the "Use when" clause, e.g. "Use when the user wants to scan a website for vulnerabilities, manage Detectify scan profiles or assets, or check scan status."

Include natural synonyms users say (vulnerability scan, web security scan) alongside the brand name to improve trigger coverage.

DimensionReasoningScore

Specificity

Names the domain ("Detectify integration") plus one concrete action ("Manage Organizations"), matching the anchor for 1-2 concrete actions without comprehensive coverage. It is not a 2 because a concrete action is named, and not a 4 because only one action is listed.

3 / 5

Completeness

Both "what" ("Detectify integration. Manage Organizations.") and "when" ("Use when the user wants to interact with Detectify data.") are present, but the "when" is generic rather than concrete trigger phrases. It is not 3 because an explicit "Use when" clause exists, and not 5 because the trigger is not specific (e.g., no mention of scanning or vulnerabilities).

4 / 5

Trigger Term Quality

The trigger relies on the brand name "Detectify" (and "Detectify data") with "Organizations" as the only other keyword, but misses the natural task terms a user would say (scan, vulnerability, security scan). It is above 2 because a clear trigger clause is present, but below 4 because common variations and synonyms are absent.

3 / 5

Distinctiveness Conflict Risk

"Detectify integration" carves out a clear, product-specific niche with a distinct trigger ("Detectify") and minimal conflict risk with other skills. It is not 4 because the niche and trigger are unambiguously distinct rather than merely "mostly" distinct.

5 / 5

Total

15

/

20

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

15

/

16

Passed

Repository
membranedev/application-skills
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.