CtrlK
BlogDocsLog inGet started
Tessl Logo

manage-portal-applications

Manage the applications that hold API credentials inside an API Experience Hub portal. Use when a portal consumer needs to list their applications, check if a name is available, create a new application, update metadata, rotate the client secret, or delete an application they no longer use.

68

Quality

82%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

High

Do not use without reviewing

SKILL.md
Quality
Evals
Security

Quality

Content

76%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A well-structured, highly actionable application-lifecycle workflow with concrete tool-call specs and clear sequencing. The main gap is the absence of validation/confirmation checkpoints around the destructive delete and secret-rotation steps.

Suggestions

Add an explicit validation/confirmation checkpoint before Step 7 (delete) and Step 5 (secret reset) — e.g. verify the applicationId, confirm no active contracts, and require explicit user confirmation — to lift workflow clarity above the destructive-operation cap.

Trim the motivational "What you'll build" / "What You've Built" framing and de-duplicate the repeated targetOrganizationId/portalId input descriptions (reference them once in Prerequisites) to improve token efficiency.

DimensionReasoningScore

Conciseness

Mostly efficient structured yaml specs, but the "What you'll build" / "What You've Built" motivational framing and the repeated boilerplate input descriptions ("Anypoint organization ID hosting the portal", "Portal ID") on every step are minor padding that could be trimmed.

4 / 5

Actionability

Each step provides a fully executable tool-call spec — operationId, typed inputs with JSONPath outputs — plus concrete example values (e.g. name: orders-prod-client, redirectUris), making the guidance copy-paste ready.

5 / 5

Workflow Clarity

A clearly sequenced 7-step flow with "What happens next" transitions and a completion checklist, but the destructive operations (delete in Step 7, secret reset in Step 5) lack validation/verification checkpoints before execution, which caps this dimension at 3.

3 / 5

Progressive Disclosure

Well-organized into Overview, Prerequisites, numbered steps, checklist, and Next Steps/Related Jobs with clearly signaled one-level references to sibling skills; no external reference files are needed, though the bulk of API specs are inline.

4 / 5

Total

16

/

20

Passed

Description

88%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong, concrete description that names the domain, enumerates specific lifecycle actions, and includes an explicit "Use when" trigger clause. Trigger-term synonyms and distinctiveness against sibling portal skills could be slightly improved.

Suggestions

Add a few natural synonyms to broaden trigger matching, e.g. "remove" alongside "delete" and "change" or "reset" alongside "rotate the client secret".

Sharpen distinctiveness from sibling skills by foregrounding the credential-bearing aspect, e.g. "Manage credential-bearing applications (clientId/clientSecret)…" to reduce overlap with request-api-access.

DimensionReasoningScore

Specificity

Lists multiple specific concrete actions — "list their applications, check if a name is available, create a new application, update metadata, rotate the client secret, or delete an application" — giving comprehensive coverage of the application lifecycle.

5 / 5

Completeness

Explicitly answers both what ("Manage the applications that hold API credentials inside an API Experience Hub portal") and when ("Use when a portal consumer needs to…") with concrete trigger phrases.

5 / 5

Trigger Term Quality

Good natural-language coverage ("create a new application", "rotate the client secret", "delete an application"), but a few common synonyms are missing (e.g. "remove" vs delete, "change/reset" vs rotate) and no file-extension-style triggers apply here.

4 / 5

Distinctiveness Conflict Risk

Clear niche — credential-bearing portal application lifecycle — with distinct triggers, but minor overlap risk with sibling portal skills (request-api-access, discover-portal-apis) in the same domain.

4 / 5

Total

18

/

20

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository
mulesoft/mulesoft-dx
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.