CtrlK
BlogDocsLog inGet started
Tessl Logo

okta

Okta integration. Manage Users. Use when the user wants to interact with Okta data.

56

Quality

65%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Low

Low-risk findings worth noting

Fix and improve this skill with Tessl

tessl review fix ./skills/okta/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

68%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body is highly actionable with concrete, copy-paste CLI commands and a solid connection state-machine, but it wastes tokens explaining Okta basics Claude already knows and—critically—provides no validation/verification steps for its destructive user and group operations, capping workflow clarity. Splitting the action catalog and trimming the intro would improve the lower dimensions.

Suggestions

Remove or shrink the opening paragraph that explains what Okta/IAM is; Claude already knows this, and it costs tokens for no new information.

Add explicit validation/verification steps before destructive actions — e.g. 'get-user first to confirm the target, then delete-user; re-run list-users to verify removal' — so destructive operations are not executed blindly.

Consider moving the 20-row popular-actions catalog to a separate reference file with a one-line pointer, leaving SKILL.md as a lean overview.

DimensionReasoningScore

Conciseness

Mostly efficient operational commands, but it opens by explaining what Okta is ('Okta is an identity and access management platform... authentication, authorization, and single sign-on') — a concept Claude already knows — and includes filler like 'Use action names and parameters as needed.' that could be trimmed.

3 / 5

Actionability

Copy-paste-ready bash commands with real flags cover every common case — install, login (incl. headless completion), connection ensure/get with --wait, action list/run with --input JSON, and the proxy request command — plus a concrete flag table for proxying.

5 / 5

Workflow Clarity

The connection flow has a clear state-machine with poll/act/re-poll checkpoints (READY/BUILDING/CLIENT_ACTION_REQUIRED/CONFIGURATION_ERROR), but the skill exposes destructive and batch operations (delete-user, deactivate-user, suspend-user, add/remove-from-group) with no validation or verification steps, which caps this dimension at 3 per the rubric.

3 / 5

Progressive Disclosure

Well-organized into clear headed sections with no nested references and no bundle files needed; the 20-row popular-actions table is bulk inline content that could arguably live in a separate reference file, a minor organization gap keeping it below 5.

4 / 5

Total

15

/

20

Passed

Description

61%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description is distinctive and includes an explicit 'Use when' trigger, but it is thin on capability specificity and trigger-term breadth, naming only user management out of Okta's entities. Expanding the what and the natural-language triggers would lift the weaker dimensions.

Suggestions

List the concrete capabilities beyond users, e.g. 'Create, update, and deactivate users; manage groups and applications' to raise specificity.

Add natural trigger terms users actually say — 'manage Okta users, groups, or applications' or 'provision/deprovision users' — to broaden trigger-term coverage.

Reflect the full scope (groups, applications, factors) in the 'what' clause so completeness is not capped by the users-only framing.

DimensionReasoningScore

Specificity

Names the Okta domain but the only action stated is 'Manage Users' — a single, generic verb ('Manage') covering CRUD rather than the concrete actions (create/update/delete/activate) the skill actually exposes, with groups, applications, and factors entirely absent.

2 / 5

Completeness

Both 'what' ('Okta integration. Manage Users.') and 'when' ('Use when the user wants to interact with Okta data.') are present with an explicit trigger, but the 'what' is narrow — only Users, not the full Okta scope — so it falls short of a fully comprehensive answer.

4 / 5

Trigger Term Quality

Includes the natural keyword 'Okta' and the phrase 'interact with Okta data', but misses common variations users would say such as users, groups, applications, SSO, login, or MFA.

3 / 5

Distinctiveness Conflict Risk

'Okta' is a distinctive named product and the trigger is scoped to Okta data, giving a clear niche with minimal risk of firing for unrelated skills.

5 / 5

Total

14

/

20

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

15

/

16

Passed

Repository
membranedev/application-skills
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.