CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

check-updates

Use when a Power Apps mobile project needs dependency updates or an npm audit review. Checks the mobile-app plugin first, then updates the native host, other Microsoft packages, and all remaining direct npm packages in order with validation and rollback.

Quality

87%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

SKILL.md
Quality
Evals
Security

Quality

Content

81%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A highly executable, well-sequenced workflow with explicit validation and rollback feedback loops, exact commands, and per-package approval gates — workflow clarity is exemplary. The minor costs are density in a few long multi-clause sentences, two commands missing an operand or path, and Step 1's multi-host branching that could be offloaded to a reference file.

DimensionReasoningScore

Conciseness

The body is directive and dense with no explanations of concepts Claude already knows, but sentences like the Step 1 approval paragraph and the local-source checkout bullet pack many clauses that could be tightened. Matches 'efficient; minor instances of over-explanation that could be trimmed' rather than the every-token-earns-its-place anchor.

4 / 5

Actionability

Guidance is mostly executable with exact commands (`npm outdated --json --depth=0 > .tmp/dependency-maintenance/outdated.json`, `npx --no-install expo install --check`, `npm install --ignore-scripts`), but there are minor gaps: `validate-mobile-files.js` is named without an invocation path, and the install command omits the package/version operand. Fits the 4 anchor (concrete commands with minor gaps) rather than fully copy-paste ready.

4 / 5

Workflow Clarity

Steps 1-4 plus Finish are explicitly sequenced with telemetry checkpoints, per-package AskUserQuestion approval gates, explicit validation commands after each update, and a feedback loop on failure (restore snapshot, reconcile node_modules, return `BLOCKED`). Not 4: validation checkpoints and error-recovery loops are present at every risky stage, not just most.

5 / 5

Progressive Disclosure

The single-file body is well sectioned by step with one clearly signaled top-level external reference (shared-instructions.md, 'read first'), and there are no nested or buried references. Not 5: at ~80 lines with a long multi-host update-path branch list in Step 1, some detail would sit better in a separate reference file; not 3: references that exist are clear and content placement is otherwise appropriate.

4 / 5

Total

17

/

20

Passed

Description

92%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong description: explicit third-person 'what' (ordered plugin check, native host, Microsoft packages, then remaining npm packages with validation and rollback) paired with an explicit 'Use when' trigger clause scoped to a distinct niche. The only weakness is limited synonym/extension coverage in its trigger terms.

DimensionReasoningScore

Specificity

The description lists multiple concrete actions — 'Checks the mobile-app plugin first, then updates the native host, other Microsoft packages, and all remaining direct npm packages in order with validation and rollback' — fully covering the skill's behavior with no vague filler, matching the comprehensive-coverage anchor. Not 4: there are no minor gaps; every clause names a concrete action in third person.

5 / 5

Completeness

It explicitly answers both questions: 'Use when a Power Apps mobile project needs dependency updates or an npm audit review' provides concrete trigger phrases, and the ordered action list defines what it does. Not 4: the 'when' clause is already explicit and specific, not something that could be made clearer.

5 / 5

Trigger Term Quality

Natural trigger phrases are present — 'Power Apps mobile project', 'dependency updates', 'npm audit review' — which users would plausibly say, matching the good-coverage anchor. Not 5: it lacks synonym and extension variations such as 'packages', 'upgrade', 'outdated', or 'package.json'.

4 / 5

Distinctiveness Conflict Risk

'Power Apps mobile project' dependency updates is a clear niche with distinct, domain-scoped triggers, so conflict risk with generic npm or document skills is minimal. Not 4: the domain qualifier makes overlap with even closely related generic dependency-update skills unlikely.

5 / 5

Total

19

/

20

Passed

Validation

81%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 13 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

allowed_tools_field

'allowed-tools' contains unusual tool name(s)

Warning

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

relative_links

Relative link issues: 1 suspicious

Warning

Total

13

/

16

Passed

Repository

microsoft/power-platform-skills

Path

plugins/mobile-apps/skills/check-updates/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.