CtrlK
BlogDocsLog inGet started
Tessl Logo

dependabot-snyk-pr-management

Interact with Dependabot and Snyk pull requests for dependency upgrades and security fixes. Documents Dependabot commands, javax/jakarta compatibility checks, safe merge workflows, and troubleshooting. Use when managing dependency upgrade PRs or security fix PRs.

70

Quality

86%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Passed

No findings from the security scan

SKILL.md
Quality
Evals
Security

Quality

Content

81%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body is highly actionable with explicit validation for destructive batch operations, and is well-structured with clear section navigation. It is somewhat over-long due to repeated rebase/merge instructions and would benefit from offloading the command table and scenarios into reference files.

Suggestions

Consolidate the recurring rebase and merge instructions into a single canonical example and cross-reference it from scenarios and troubleshooting to reduce duplication.

Move the full Dependabot command table and the six Common Scenarios into a separate reference file, keeping SKILL.md as a concise overview that links one level deep.

Tighten or trim the Dependabot Configuration section's ecosystem bullets where they restate information already discoverable from `.github/dependabot.yml`.

DimensionReasoningScore

Conciseness

Content is dense and actionable with no concept-explanation padding, but rebase/merge instructions recur across multiple sections (Example Usage, Workflow, Scenario 2, Scenario 4, Troubleshooting) and could be consolidated.

3 / 5

Actionability

Provides fully executable, copy-paste-ready commands (e.g., `gh pr comment <PR_NUMBER> --body "@dependabot rebase"`, `gh pr merge <PR_NUMBER> --squash --auto`) covering the common cases comprehensively.

5 / 5

Workflow Clarity

Multi-step batch/destructive operations include explicit validation checkpoints — the Safety Rules gate, Scenario 3's passing-checks filter and 'Do NOT use a blind loop' warning, and rebase→recreate→close feedback loops.

5 / 5

Progressive Disclosure

Clear section headers give good navigation and external file references are signaled, but the full command table and six scenarios are inlined in a single ~357-line file rather than split into one-level-deep reference files.

4 / 5

Total

17

/

20

Passed

Description

92%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description is specific, complete, and clearly distinct: it states concrete capabilities and gives explicit 'Use when' trigger phrases tied to natural user requests. Trigger-term coverage is strong but not exhaustive of every synonym a user might utter.

DimensionReasoningScore

Specificity

Names the domain and multiple concrete actions — 'Dependabot commands, javax/jakarta compatibility checks, safe merge workflows, and troubleshooting' — providing comprehensive capability coverage.

5 / 5

Completeness

Explicitly answers both 'what' (documents commands, compatibility checks, merge workflows, troubleshooting) and 'when' ('Use when managing dependency upgrade PRs or security fix PRs') with concrete trigger phrases.

5 / 5

Trigger Term Quality

Includes natural user-facing terms like 'Dependabot', 'Snyk pull requests', 'dependency upgrades', 'security fixes', and 'PRs', but a few common variations (e.g., 'rebase PR') are missing.

4 / 5

Distinctiveness Conflict Risk

Targets a clear, narrow niche — bot-driven Dependabot/Snyk dependency and security PRs — with distinct triggers and minimal overlap with other skills.

5 / 5

Total

19

/

20

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

relative_links

Relative link issues: 3 suspicious

Warning

Total

15

/

16

Passed

Repository
mock-server/mockserver-monorepo
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.